Brevo is an all-in-one digital marketing platform, and before creating your marketing campaigns you should set up SPF and DKIM to ensure your emails are sent from your domain.
In this article, we will explain how to authenticate your domain with the help of SPF and DKIM records.
Your first step is to access the Domains page. To access the Domains page:
1 - Click on your name at the top-right side of the screen.
2 - Select Senders & IP.
3 - Click on Domains.
In the Domains page, find or add the domain you want to authenticate and click on verify.
Once you click on the Verify button, Brevo will provide you with two DNS records: Brevo code and a DKIM record.
The Brevo code is just for your domain verification, you need to publish that TXT record in your DNS for your domain to be verified.
Now we’ll go into details about domain authentication and will explain how to add SPF and DKIM records.
Brevo SPF Record Configuration:
Note: There is no need to set up an SPF record for Brevo, as the "Envelope From" domain will always be handled by the servers of Brevo. For SPF to be aligned, you should have your “From address” domain in the “Envelope From” address. Brevo uses "af.d.mailin.fr", “kh.d.sender-sib.com”, and other domains as the "Envelope From" domain. During the DMARC check, this "Envelope From" domain will not match with your “From address” domain, so SPF alignment will fail. This happens not only with Brevo but with the majority of Email Service Providers.
In case you add the include provided from Brevo (include:spf.sendinblue.com) in your SPF record, your SPF record will look like the one below,
v=spf1 include:zoho.com include:spf.sendinblue.com ~all
Also keep in mind that DMARC requires either DKIM or SPF to be authenticated and aligned, so you will pass the DMARC check even without SPF alignment. SPF alignment failing won't affect your email deliverability, if you have DKIM in place. Thus you need to set up only DKIM for Brevo.
Brevo DKIM Record Configuration
Brevo provides you with a DKIM TXT record which you’ll need to publish it in your Managed DKIM.
Head to managed DKIM, click on “Add Record” then specify the Email Sender—in this case, Brevo—then add the TXT record. Finally, click the “Add” button; the system will automatically save the configuration.
Once you finish publishing the TXT record in your Managed DKIM, go back to your Brevo account and click the Check Configuration button. If everything is done properly, a green check mark appears next to the Value fields for the DKIM record.
Important: DMARC compliance for Brevo is achieved via DKIM authentication and alignment only. Although you’ve not configured SPF, DMARC will still pass. You can test it with our Email Investigation tool. (See the screenshot below)
