How to configure Brevo DMARC, DKIM and SPF for email authentication?

March 27, 2024

Brevo DMARC, DKIM, SPF - Custom Domain Authentication (2024 Guide)

Brevo generates DNS records which you can add in your hosting provider to authenticate your domains. Once your domain is authenticated, your webmail will have a unique signature which makes it safe against spoofing.

DKIM and SPF are two commonly used DNS records to protect email communication on Emai Service Providers (ESPs). In this article, we'll perform the configuring steps to add DNS records in your hosting provider for webmail authentication.

  1. In Brevo Home tab, click on your account name and select Senders, Domains, and Dedicated IPs.

    Open Senders, Domains and IPs in Setttings

  2. Now click on Domains > Add a Domain.

    Add Sender Domain

  3. Write your domain name in the pop up window and click on "Save this email domain."

    Save your domain

  4. Next, you'll see Brevo DKIM and DMARC records. Copy these records and add in your DNS provider.

    Brevo code, DKIM, and DMARC records

  5. Brevo SPF value is `v=spf1 include:spf.brevo.com ~all`. Use the SPF Merge Tool to combine the Brevo SPF value with your existing SPF value.

  6. Head over to Cloudflare home tab, click on your Website > DNS > Records > Add record.

    Add new DNS records in Cloudflare

  7. Add the values in required fields and click Save to add a new record.

  8. However, Brevo DMARC record with `p=none` is just a placeholder. Use DMARC Lookup Tool which analyzes data behind DMARC reports and allow you to act on it to deploy strict policy. Only a strict DMARC policy provides better deliverability and protection from email spoofing.

  9. Open the DMARC tool, write your domain name here, and click Check.

    Add domain name and click Check

  10. The tool gives you a suggested value. Copy the record name and value and paste them into the DNS provider.

    Add the Suggested DMARC value to your DNS provider for domain authentication

  11. Once records are added, go back to Brevo and click on Authenticate this email domain.

    Authenticate records

  12. You'll see green check marks before each record, which means domain are successfully authenticated.

    Domain authentication successful