SPF, DKIM and DMARC · Checked 8 November 2026

Mailchimp SPF, DKIM and DMARC records

The records that let mail sent through Mailchimp pass email authentication, and how to confirm they are published correctly.

Check your domain

Enter your domain, then pick the record to check:

SPF

No SPF record is required by Mailchimp's authentication steps.
  • Mailchimp's domain authentication article covers DKIM and DMARC and does not ask for an SPF change.
  • If your domain already has an SPF record for other senders, leave it as it is. Do not add a second record.

Syntax and the 10-lookup limit are covered in SPF record syntax.

DKIM

  • Mailchimp asks for two CNAME records for DKIM. Their names and values are shown in your account: open Account & billing, then the Domains tab, and choose Start authentication next to your verified domain.
  • Mailchimp's example names are of the form k2._domainkey.example.com. If your DNS provider adds the domain to the end of the name, enter only the prefix.
  • DMARC is one TXT record at host _dmarc. Mailchimp shows its value in the same place.
  • Validation can take up to 48 hours. Mailchimp also offers an automatic connection to some DNS providers.
k2._domainkey.example.com.  IN  CNAME  <value from your Mailchimp Domains tab>.

Not sure which selector a message was signed with? See what is a DKIM selector.

DMARC

DMARC is a separate record that you publish yourself, at _dmarc under your domain. Start by only collecting reports, then tighten the policy once the reports show all your senders passing:

_dmarc.example.com.  IN  TXT  "v=DMARC1; p=none; rua=mailto:dmarc-reports@example.com"

Replace the address with a mailbox you control. What is DMARC explains the policies, and how to read a DMARC report shows what to do with the reports.

Common problems

  • The domain appended twice to the CNAME name by the DNS provider. Enter only the prefix.
  • Only one of the two CNAME records published.
  • A DMARC record added that conflicts with an existing one. A domain should have only one record at _dmarc.
  • Authenticating a domain that is not yet verified in the account.

Failing messages are diagnosed in why DKIM or DMARC fails.

Sources

Values on this page come from the provider's own documentation, last checked on 8 November 2026. Providers change these settings, so confirm against the current page before you edit DNS:

Frequently asked questions

How many DNS records does Mailchimp need for domain authentication?

Two CNAME records for DKIM and one TXT record for DMARC, whose names and values are shown in your account.

Where do I find my Mailchimp DKIM values?

In Account & billing, on the Domains tab, by choosing Start authentication next to your verified domain.

Does Mailchimp need an SPF record?

Its domain authentication steps do not ask for one. Keep any SPF record you already have for your other senders.

How long does Mailchimp domain authentication take?

Validation can take up to 48 hours after the records are published.