How to configure DMARC, DKIM, SPF records in Elastic Email for domain authentication?

April 24, 2024

Domain Authentication with Elastic Email - DKIM, SPF, DMARC Configuration

Elastic Email provides DNS records for domain authentication. You can add these records to your DNS provider and secure emails against spamming and spoofing. The DKIM, DMARC, SPF, and other records are crucial for proving your email domain's legitimacy. Setting up DNS records can get you lost along the way. That's where we come to help you. In this guide post, you'll find easy-to-follow steps for configuring domain authentication.

  1. Open Elastic Email and go to Settings.

  2. In the Domains tab, click on Manage Domains.

    Open Elastic Email Settings
  3. Click Start Verification in the Domain Verification tab.

    Enter domain name for verification
  4. Choose the option Verify Domain if you own a domain.

    Select Verify Domain

  5. In step 1, write your domain name and click Continue.

    Entre domain and click Continue

  6. In step 2, read the instructions for adding DNS records and click Continue.

    Follow the given instructions for adding records to the DNS provider

  7. In step 3, You'll be asked to check for pre-existing SPF records in your DNS provider. If it already exists, merge Elastic Email SPF with previously added SPF to avoid conflicts.

  8. Use the SPF Merge Tool to combine the values of both SPFs.

  9. Add both records, one in each line, and click Submit.

    Add SPF records and click Submit

  10. The tool will give you a merged value of multiple SPF records.

  11. Open your DNS provider. We are using Cloudflare for demo purposes, but you can add these records to any DNS provider.

  12. On the Cloudflare Home tab, click on your Website.

    Click on your Website

  13. Click on DNS and go to Records, here, click Add Records.

  14. Paste the Record Name and Merged Value copied from the SPF Merge Tool into designated fields and click Save.

    Add merged SPF record to the DNS provider

  15. If you don't have a pre-existing SPF record, then select the option "I did not find the record described above."

    Copy Elastic Email SPF and add to the DNS provider.
  16. Copy Elastic Email SPF record name and value as it is and add it to the DNS provider.

    Add SPF record name and value to the DNS provider

  17. Now copy Elastic Email DKIM and CNAME records from Elastic Email and add them to the DNS provider one by one.

  18. For the DMARC record, use DMARC Lookup Tool which analyzes data behind DMARC reports and acts on it to deploy strict policy (p=reject). Only a strict DMARC policy provides better deliverability and protection from email spoofing.

  19. Open the DMARC tool, write your domain name here, and click Check.

    Add domain name and click Check

  20. The tool gives you a suggested value. Copy the record name and value and paste them into the DNS provider.

    Add the Suggested DMARC value to your DNS provider for domain authentication

  21. Once all records are added, return to Elastic Email and click Verify Records.

  22. Now you'll see a big tick mark and small green check marks with each record. This means DNS records were added successfully and your domain is now authenticated.

    Domain authenticated successfully

  23. Moving to step 5, write the email you want to select as the default sender email.

    Set up Default Sender Email

  24. Lastly, you have the option to set up a custom Bounce Domain.

  25. Click Set Up Bounce Domain and select any of the options; default or custom. Enter the Bounce Domain and click Continue.

    Set Up Bounce Domain

  26. Now copy the CNAME record for your bounce domain and add it to the DNS provider.

    Add CNAME record to DNS provider to authenticate bounce domain

  27. Click Verify Record and you'll see a green check mark under Bounce domain, meaning the bounce domain has been added successfully.

    Bounce Domain Set Up Successful