Guides › Providers
SPF, DKIM and DMARC for Mailchimp
SPF
Mailchimp (marketing) doesn't need an SPF include for domain authentication; it handles the return path itself. Mailchimp Transactional (Mandrill) does: include:spf.mandrillapp.com.
DKIM
Mailchimp's domain authentication uses two CNAMEs:
k2._domainkey CNAME dkim2.mcsv.net k3._domainkey CNAME dkim3.mcsv.net
Older setups used k1._domainkey → dkim.mcsv.net. Mandrill uses a TXT record at mandrill._domainkey. The checker tests k1, k2 and mandrill automatically; enter k3 in the selector field to test that one.
DMARC
DMARC is set once per domain, not per provider. If you don't have one, start in monitoring mode:
Host: _dmarc Type: TXT Value: v=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.com
Once the reports show all your legitimate mail passing, move to p=quarantine and then p=reject. See the rollout guide.
Notes
Mailchimp blocks sending from free-mail From addresses (gmail.com and similar) because of DMARC. Use your own domain.
Use the checker to confirm all three records. It detects Mailchimp's DKIM selector automatically if it's a standard one.