What are Klaviyo’s SPF and DKIM records?

Forum|Forum|5 years ago
March 30, 2021
24 replies
32739 views

Klaviyo automatically applies the necessary SPF (sender policy framework) and DKIM (DomainKeys Identified Mail)records when you have a dedicated sending domain set up for your account. When the CNAME records are added to your DNS, a subdomain is created and delegated over to Klaviyo to control and make use of. At this point, Klaviyo automatically adds the necessary SPF/DKIM records to set your account up to send emails using your own dedicated domain. On your end, you only need to add the prescribed CNAMEs; no records are required.

For additional resources, you can learn How to Set up a Dedicated Sending Domain in this article.

This topic has been closed for replies.

Show previous replies

S

Stacey

Contributor I

Hey @David To thanks for answering all of these question.

My question regarding SPF:

Since Klaviyo does their SPF records automatically within the CNAME records, but I still want the highest security by using the ‘-all’ instead of ‘~all’ in my SPF records, that won’t cause a problem?

For example, if my actual spf records include ONLY Google and Shopify + the ‘-all’, will my Klaviyo communications still go through without a problem?

K

kaine

Contributor I

Hey @David To thanks for answering all of these question.

My question regarding SPF:

Since Klaviyo does their SPF records automatically within the CNAME records, but I still want the highest security by using the ‘-all’ instead of ‘~all’ in my SPF records, that won’t cause a problem?

For example, if my actual spf records include ONLY Google and Shopify + the ‘-all’, will my Klaviyo communications still go through without a problem?

My question exactly. The google workspace documentation indicates that we need to account for all the sending domains in the SPF record. e.g. Gmail, Klaviyo, Shopify https://support.google.com/a/answer/10685031?sjid=1404055984749706168-NC

kaila.lawrence

Community Manager

Great question @Stacey and @kaine!

~all vs -all is the level of strictness the SPF record is set at. When SPF failures occur, ~all denotes a softfail whereas -all denotes a hardfail. All of this only comes into play with any SPF failures or misalignments - which when using a Klaviyo branded sending domain, should not be an issue since we are the ones that pass it automatically. Because we apply the SPF/DKIM records, we only use the ~all protocol and not the -all protocol. This would just impact the emails being sent from Klaviyo to other sources.

brettjhonson

Contributor III

Klaviyo handles SPF/DKIM setup automatically with a dedicated domain; for advanced needs, consider using SMTPmart for enhanced email solutions.

Sign up

Use your Klaviyo credentials

Log in to the Community

Use your Klaviyo credentials