Set Up - Domain Ownership & Email Authentication: CNAME, DKIM and SPF | vSend: KB Article


Set Up Custom Domain Authentication: DKIM and SPF

This walk-through is for vSend users with a vBroadcast license or vCredit holders.

Internet Service Providers (ISPs), like Google, Yahoo, and Microsoft, use DKIM and SPF authentication as a way to scan incoming emails for spam or spoofed addresses. Emails that fail authentication are more likely to arrive in a spam or junk folder.

To help ensure your campaigns reach your recipients’ inboxes and to make your campaigns look more professional, you can set up custom DKIM authentication for your domain, and add vSend to your SPF record.

In this article, you’ll learn how to set up DKIM and add vSend to your SPF record.

Before You Start

Here are some things to know before you begin this process.

  • Custom domain authentication is required for vSend users with vBroadcast licenses or vCredit holders. Verify your Domanin Ownership & Benefit from Email Authentication with DKIM & SPF.

  • To set up authentication, you need to change some account settings with your DNS provider. If you don't know who your DNS provider is, reach out to your hosting service.

  • All hosting providers are compatible with vSend's custom authentication standards. We have worked countless hours developing the framework to coexist with other marketing, hosting and email delivery platforms. You will not encounter any downtime or issues during your DNS update for vSend.

(You may verify your DNS records easily with the vDNS tool and if you need help, contact support)

Custom Authentication: Task Roadmap

To authenticate your domain, you’ll need to complete tasks in vSend and your domain provider’s zone editor or cPanel. This process requires you to copy and paste information from vSend to your domain provider’s site. We recommend that you work with two browser windows or tabs to easily move between your sites.

Here’s a brief overview of the process.

In vSend

In Your Domain's cPanel

or Zone Editor

  • Verify your domain.
  • Copy two important pieces of information, your CNAME record for DKIM, and your TXT record for SPF
  • DKIM:

You will Create a CNAME record for your site with this value:

  • SPF:

Create a TXT record for with this value: "v=spf1 +a +mx ~all"


Verify Domain and Copy Records

To get started, log in to vSend to verify your domain and copy your CNAME and TXT records.

Verify Your Domain

You’ll verify your domain ownership and email authentication in the Settings section of your vSend account. Navigate to the Verified domains page and follow the instructions in this tutorial coupled with the custom update support has provided to you. We’ll let you know when verification is complete.

This process requires you to respond to a confirmation email. If you don’t receive the email after a few moments and you’ve checked your spam or junk folders, contact support for verification troubleshooting .

Copy Authentication Information

After your domain is verified, you’ll copy some important pieces of information in your vSend account.

To find your domain’s authentication information, follow these steps.

  1. Navigate to your Verify my Domains DKIM, SPF, and CNAME.

  2. Under your domain’s name, click View setup instructions.

  3. During the Domain Authentication process support will email you the DNS update, we'll show you what information needs to be added or changed with your domain provider.

  4. In another browser tab or window, use this information to edit your domain’s DNS records, and and click Authenticate Domain when you’re done.

About DNS Record Changes

To authenticate your domain, navigate to your domain provider’s site. Then, use the the DKIM and SPF information from vSend to update your DNS records.

Domain providers use different names for the page where you’ll update the DNS record, like  cPanel, Zone Editor, Zone File Settings, Manage Domains, Domain Manager, DNS Manager, or something similar.

Example CNAME Record for DKIM

Here’s an approximate example of what your CNAME record will need to look like to set up DKIM authentication. Remember, when you edit your own records, these columns and their labels may look different.

Record Type




CNAME Record



  • DKIM requires underscores in the CNAME file. However, in the past, DNS didn’t allow for underscores and some registrars still do not allow them to appear in the CNAME file. If you receive this type of error when you set up DKIM, the issue is on the registrar's side. We recommend either of these three options: contact your registrar for assistance, set up a secondary custom domain with a registrar that allows underscores, or switch DNS providers.

  • Depending on your provider, you may need to add a period at the end of your CNAME record. Some providers add this period automatically, so you may want to refer to their help site for more information.


Example TXT Record for SPF

Here’s an approximate example of what your TXT record will need to look like to set up SPF authentication. Remember, when you edit your own records, these columns and their labels may look different.  

Record Type




TXT Record "v=spf1 +a +mx ~all"


SPF Tips

  • SPF should be set up with a TXT record, rather than an SPF record.

  • If you need hands-on assistance, several third-party services can be hired to help you with SPF setup. Check out Fraudmarc and Dmarcian for more information.

  • When you make your updates, it’s important to also ensure that any other email service provider (ESP) or internet service provider (ISP) you use is also included in your SPF record.  

  • Avoid creating more than one TXT record for SPF. However, you can create multiple values in the same record with an include statement.


"v=spf1 +a +mx ~all"
  • Depending on your provider, you may need to add quotation marks around your entire SPF record.

“v=spf1 +a +mx ~all”

How to Edit DNS Records in Common Domain Providers

Here are some instructions for editing DNS records with popular domain providers. If your service isn’t listed here, log in to your provider’s site and search their help documents, or contact their customer support team.

Dreamhost: SPF, DKIM

GoDaddy: Add a CNAME Record

Google Domains: DNS Basics

Hostgator: Manage DNS records

Hover: Edit DNS Record

Namecheap: SPF & DKIM

Network Solutions: Edit DNS Record

Squarespace: Advanced DNS Settings

Stablehost: How do I get to cpanel?

After records are entered into your DNS correctly, your domain should authenticate within a few moments. In some cases, it may take a bit longer. To complete the verification process, don’t forget to re-open your vDNS browser tab or window and click Authenticate.

When DNS authentication is successful, you’ll see three green checkmarks on the vDNS page.

Image: a screenshot of the Verified domains page, with a succesfully authenticated custom domain

vSend logs and stores your authentication when you set it up. If you make further changes to the TXT or CNAME records after you authenticate your domain, it could interfere with the information we have on file. Before you make further changes, disable authentication on the Verified domains page, and re-authenticate after your DNS changes are complete.

Technical Support

SPF/DKIM/DMARC Verification

The vDNS public tool will allow you to check if your domain has appropriate DNS records for email authentication.

Each domain host has a unique way of adding/editing DNS records. If you don't know your domain host (e.g. Godaddy), look it up here. After adding the DNS records, enter your domain below to check if everything is working. Note that records can sometimes take a few hours to propagate.

Please be aware that setting up DKIM/SPF/DMARC is not a "boost" for deliverability, and generally you won't see any noticeable improvement to deliverability after setting up authentication. Unless ofcourse your DNS was improperly setup to begin with. For instance, if you have more than one SPF record, and you don't know what that means than you've been improperly setup and not to worry!! vSend DNS support has got you covered! For more information on why you may want to setup authentication for your domain, check out our Domain Ownership Verification & Email Authentication knowledgebase.

*You can setup domain authentication for as many domains as necessary.

How to create an SPF/TXT record?

If you are creating the SPF record you will likely be viewing a page with at least two fields, though some hosts or DNS mangers may vary they should be the following: "Host" or "Name" and "Value" or "Points To".

Here is what it may look like for you, depending on your current setup let's be sure to any other email delivery or hosts within one SPF record.


Check to see if there are any other SPF records in your domain's DNS. There can only be one SPF record per domain, so if there is an existing record just add to that record.

For example, if your domain already has the record: v=spf1 +a +mx ~all ....then you would just add: The final record would look like this: v=spf1 +a +mx ~all

vSend Customer Success is standing by to assist with your DNS Update and Domain Verification.

(In some hosts, you may leave the field blank as your host may have pre entered your local domain for this field.. However if it is not filled with place an @ symbol under the host or name category. @ means that the record is pointed home at your own domain. Some editors will require the "@" symbol, some DNS managers will require you to enter your own domain, and others will not let you enter anything. Every DNS Editor is different - you may need to contact your hosting provider for more information on how to enter this record correctly).

Domain Alias (CNAME) Verification

CNAME records should be added as a subdomain of your domain. You should place a CNAME record Hosts TRACKING.YOURDOMAIN.COM subomdomain that points to Once this is setup, the subdomain can't be used for anything else.

CNAMES do not have a large impact on deliverability. Often used to place DKIM and other TXT or SPF, and Domain Ownership Verification.

Need help? Check out our Domain Ownership Verification & Email Authentication knowledgebase


If you've entered all records correctly and your authentication isn’t working right away, there typically isn’t a cause for concern. You may need to wait a bit longer (up to 24 hours) since it can sometimes take time for servers to recognize your changes. If you still experience problems, reach out to your domain provider’s help site for tips on troubleshooting DNS records in their service.

Share on:

vSend Terms of Service Contact

Vapor B2B LLC is a marketing company working with business owners to expand their outreach and utilize consolidated marketing tools in a cost-effective and measurable manner.