How to configure Omnisend DKIM, SPF, DMARC for domain authentication?

SPF ensures that only authorized servers can send emails on behalf of your domain, acting like a security check at the door. DKIM adds a digital signature to verify email integrity. Together, Omnisend SPF and Omnisend DKIM form the backbone of DMARC which enforces email authentication policies. Setting up these protocols with Omnisend is essential for protecting your sender reputation and improving email deliverability. This guide will walk you through the steps to authenticate your domain with Omnisend. Let’s get started!

1. Login to your Omnisend account, click on your account name and go to Store Settings.

   

2. Scroll down to select Sender Domains in the left hand side panel and click on Add Sender Domain.

   

3. Write your domain name in the designated field and click Continue.

   

4. Now you'll see Omnisend SPF, DKIM, and DMARC records on your screen. Copy these records and add in your DNS provider.

   

5. Open your DNS provider dashboard (we are using Cloudflare but you can add records to any DNS provider).

6. Go to the home tab and click on your website.

7. Click DNS > Records > Add record > paste record values > Save.

   

8. However, Omnisend DMARC record with p=none is just a placeholder. Use DMARC Check Tool which analyzes data behind DMARC reports and allow you to act on it to deploy strict policy. Only a strict DMARC policy provides better deliverability and protection from email spoofing.

9. Open the DMARC tool, write your domain name here, and click Check.

   

10. Replace _dmarc record value with suggested DMARC value in your DNS settings.

11. When all records are added, go back to Omnisend and click Verify under DMARC record.

12. Under each record, you'll see a green bar with the text "Record was added successfully" which means your domain has been authenticated.

    

If you don't see your domain immediately authenticated, there is no need to worry. It may take a few hours for changes to apply. Wait for 24 hours and if there is still no authentication message, contact your DNS provider for further assistance.