Hi ​@Sam91,

Are you noticing SPF and DKIM failures when you send an email and then inspect the email header itself? To do this (in Gmail), you can click into the email, then click the 3 dots on the right side of the email, selecting “Show original.” After doing this, you should see a header that looks like this:

Does the SPF and DKIM signature here say PASS or FAIL? It’ll be best to get the information straight from the source, than via a 3rd party tool. 

Klaviyo does add SPF and DKIM to your domain independently - all you’ll need to do is set up your Branded sending domain and DMARC, so it would be a bit strange for you to see SPF and DKIM failures. That being said, if you are noticing them failing when inspecting your message headers, I’d recommend removing your Branded sending domain, removing Klaviyo’s records from your DNS provider, and then adding your Branded sending domain and the relevant records back again. That can sometimes do the trick. Let me know if this works!

Hi @Sam91,

If Klaviyo has verified your SPF and DKIM records but third-party tools like Mail Tester or PowerDMARC still show “no record found,” it’s usually a DNS propagation or configuration issue. Here’s what to check:

Wait for full DNS propagation — it can take up to 24–48 hours after making DNS changes.

Verify domain and subdomain alignment — ensure the SPF and DKIM records were added to the same sending domain (e.g., mail.yourdomain.com vs yourdomain.com).

Double-check syntax —

SPF should look like:

v=spf1 include:klaviyo.com ~all

DKIM should match exactly the value Klaviyo provided, under the correct selector (e.g., kl._domainkey.yourdomain.com).

Avoid duplicates — only one SPF record should exist. If you have more than one, merge them.

Test using your exact sending domain in the mail-tester or PowerDMARC query, not just the root domain.

If it still fails after checking all that, contact your DNS host’s support — sometimes cached or misconfigured records prevent propagation.