Create a key to copy examples filled with your team.
What if my domain is not verifying?
DKIM and return-path CNAMEs must match exactly.
Send stays blocked until the DKIM CNAME and the return-path CNAME match exactly. SPF is optional. Click Check DNS, or POST /api/v1/sending_domains/:id/verify.
What must match
| Record | Check |
|---|---|
| DKIM CNAME | {selector}._domainkey.{domain} must CNAME to {team_id}-{domain_id}.{dkim_zone}. |
| Return-path CNAME | rp.{domain} must CNAME to the return-path zone. |
| SPF TXT | Optional. A miss sets spf_status to failed and does not block send. |
DNS can be slow. Publish the records, wait for the zone to answer, then check again.
Common mistakes
- Publishing a TXT where we asked for a CNAME.
- Wrong host. DKIM is
{selector}._domainkey.{domain}, not{domain}. Return-path isrp.{domain}. - Pointing MX at the sending domain. Receiving uses
inbound.{domain}. See MX conflicts.