Squarespace DMARC, DKIM and SPF Domain Authentication - Step by Step DNS Configuration

DMARC, DKIM, and SPF are commonly used email security standards required by inbox providers like Google and Yahoo. These DNS records prove that you are a legitimate source and that your emails are safe to open.

When your domain is authenticated, your emails won't be marked as spam. Squarespace provides you with the DKIM and DMARC records for sender domain authentication. However, SPF is not supported by this email service provider.

In this article, you will be guided step-by-step through the domain authentication process. So keep reading!

Configure Squarespace DKIM Record:

1. On the Squarespace dashboard, click Websites.

   

2. Click Marketing and go to the Email Campaigns option.

   

3. Open Email Campaign Settings.

   

4. Click Add Sender and write down your Sender name and Email address.

   

5. Check your email inbox for the domain verification code - add it in the Squarespace prompt and click Next.

   

6. Under your domain name, click Authenticate.

   

7. You'll see the Squarespace CNAME DKIM record on the next page - add it to the DNS provider.

   

Add Squarespace records to DNS provider:

1. Login to your DNS provider. We are using Cloudflare for this guide.

2. Click on your domain in the Websites tab.

   

3. Click DNS and go to Records.

4. Hit the Add Record button to add a new DKIM record to the DNS dashboard.

   

5. Select the type CNAME.

6. Add the record name in the Name field.

7. Add the record value in the Target field.

8. Turn off the proxy and click Save.

   

IMPORTANT: Always turn off proxy for every CNAME record. If enabled, it diverts the traffic to your DNS server instead of your email server.

Verify the Squarespace DKIM Record:

1. Return to the Squarespace DNS page and click Authenticate Domain.

   

2. You should see a green tick mark with the DKIM record which indicates it is verified.

NOTE: If you do not see the green tick mark immediately after adding the record to the DNS provider, wait up to 48 hours and check again. The DNS server may take some time to update the changes.

Generate Squarespace DMARC Record:

The DMARC value provided by Squarespace (p=none) only provides initial monitoring which does not offer full email protection.

The value has no destinations where the unauthorized emails will be going. Without the insights about DMARC reports, your emails are still at risk.

DmarDkim.com has built a tool that gives you actionable insights about your DMARC reports and implements a strict policy accordingly.

1. Go to DMARC Check Tool.

2. Write your domain name and click Check.

   

3. The tool gives you a Suggested value - add it to your DNS provider.

   

4. Sign up to get access to the Reports Dashboard.

If you are having any trouble authenticating your Squarespace DNS records, you can hire a DmarcDkim.com expert to manage your sender domain authentication for you.