Customer.io SPF, DKIM, DMARC, and Tracking Record Configuration

Customer.io SPF, DKIM, DMARC, and Tracking Record Configuration

July 14, 2024

How to setup SPF, DKIM, DMARC, and Tracking records for Customer.io?

This step-by-step guide will walk you through the domain authentication process with the help of Customer.io DSN records.

You can find the DKIM, SPF, DMARC, MX, and Link Tracking records in the Customer.io Sending Domains tab.

Read till the end to learn how to set up the DNS records in your DNS provider for email domain verification and protect it against spamming and spoofing.

Configuring Customer.io DNS Records:

  1. On the dashboard, click the Settings icon and go to Workspace Settings.

    Go to Settings and click Workspace Settings

  2. Go to the Email tab.

    Go to the Email tab

  3. Click Add Sending Domain and add your domain name and email.

    Click Add Sending Domain and add your domain

  4. In the top right corner, click the Verify Domain option.

    Click on the

  5. In the "Authentication" tab, you'll find the MX, DKIM, SPF, and DMARC records.

    MX, DKIM, SPF, and DMARC records

Adding Customer.io MX Records:

  1. Login to your DNS provider and go to your website. We are using Cloudflare for this guide.

    Go to your Website in the DNS provider

  2. Click DNS, go to Records, and hit the Add Record button.

    Click DNS, go to Records and hit the Add Record button

  3. Select the record type MX.

  4. Copy the Host name from Customer.io and add it to the Name field in your DNS dashboard.

  5. Copy the record Value and add it to the Mail server field.

  6. Select Priority "10" and click the Save button.

    Add the MX record to the DNS provider

Adding Customer.io DKIM Record:

  1. Select the record type CNAME.

  2. Copy the Host name and Value and paste them into the dedicated field in your DNS dashboard.

  3. Turn off proxy and click Save.

    Add the CNAME record to the DNS provider

IMPORTANT: Always turn off proxy for CNAME records. When it is enabled, the traffic diverts to your DNS server instead of your email server.

Adding Customer.io SPF Record:

  1. Select type TXT and add the host name and value.

  2. Click the Save button.

    Add the SPF record to the DNS provider

Merge Multiple SPF Records:

Adding more than one SPF record to the DNS dashboard can cause conflicts and one of them will stop working. If your DNS dashboard has an existing SPF record, merge it with the Customer.io SPF record.

  1. Go to the SPF Merge Tool.

  2. Write down your domain name and add the Customer.io SPF record.

  3. Click the Merge SPF Values button.

  4. The tool detects and merges your existing SPF with the Customer.io SPF record.

    Merge multiple SPF records to get a single record

  5. Edit your existing SPF record and replace the previous value with the merged value.

Adding Customer.io DMARC Record:

The DMARC record provided by Customer.io has a p=none value which doesn't provide a strict policy. Also, it doesn't have a destination where unauthorized emails will be going. Without destinations, you can not have insights about your DMARC reports.

To implement a strict DMARC policy with actionable insights, you can use a third-party tool.

  1. Open the DMARC Checker.

  2. Write down your domain name and click Check.

    Write down the domain name and click Check

  3. Copy the Suggested value and add it to your DNS provider.

    Add the DMARC record to the DNS provider

  4. Sign up to get access to the Reports Dashboard.

  5. After 24 hours, the tool starts generating your DMARC reports and guides you through implementing a strict policy.

Adding Link Tracking Record:

If you want to keep track of your email's clicks, opens, and un/subscribers, you can add a tracking record provided by Customer.io.

  1. Go to the "Link Tracking" tab.

  2. Add a subdomain (eg; email, track, etc) for your root domain.

    Go to Link Tracking tab and add a subdomain

  3. In the DNS provider, select type CNAME.

  4. Add the Host name in the Name field.

  5. Add the Canonical name in the Target field.

  6. Turn off the proxy and click Save.

    Add the tracking record to the DNS provider

Verify DNS Records:

  1. When you have added all records, click the Verify button below the DNS records (in both tabs, Authentication and Link Tracking).

    Verify the DNS records

  2. If the records are verified, the grey tick marks should turn green.

  3. If records are not verified, wait up to 24 hours for the servers to update DNS changes.

For assistance and support, hire a DmarcDkim.com expert.