Guides › Providers

SPF, DKIM and DMARC for Zendesk

SPF

Host: @
Type: TXT
Value: v=spf1 include:mail.zendesk.com ~all

If you already have an SPF record, add the include to it rather than creating a second record. Two SPF records make SPF fail (see merging SPF records).

DKIM

Enable Digital Signatures in Admin Center › Channels › Email, then publish two CNAMEs:

zendesk1._domainkey  CNAME  zendesk1._domainkey.zendesk.com
zendesk2._domainkey  CNAME  zendesk2._domainkey.zendesk.com

Enter zendesk1 in the checker's selector field to verify.

DMARC

DMARC is set once per domain, not per provider. If you don't have one, start in monitoring mode:

Host: _dmarc
Type: TXT
Value: v=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.com

Once the reports show all your legitimate mail passing, move to p=quarantine and then p=reject. See the rollout guide.

Use the checker to confirm all three records. It detects Zendesk's DKIM selector automatically if it's a standard one.

Related