SendGrid is an email service trusted by developers and marketers for time-savings, scalability, and delivery expertise.  

To enable Sendgrid to send authenticated mail from your domain your SPF and DKIM settings must be enabled. 

Table of Contents
  1. SendGrid SPF Setup
  2. SendGrid DKIM Setup
    1. Example DKIM Record: Automated Security ON
    2. Example DKIM Record: Automated Security OFF

1. SendGrid SPF Setup

Please note that the following SPF changes should only be applied to the Sendmarc record within Sendmarc and not the hosting provider. 

Include String ~all
Sendgrid SPF Recordv=spf1 ~all

2. SendGrid DKIM Setup

SendGrid will always provide you with a custom DKIM signature. However, your custom DKIM signature is only automatically updated if you select automated security when authenticating your domain. 

If you turn automated security OFF, you will be responsible for updating your DKIM signature whenever you make a change to your sending domain.

  1. In the SendGrid UI, select "Settings" > "Sender Authentication".
  2. In the domain authentication section, click "Get Started" or "Authenticate Your Domain".

  3. Next, add in information about your DNS host, and indicate whether you also want to set up link branding. Click "Next".

  4. Fill in the domain that you want to send from and add advanced settings as needed. Make sure that you only enter the name of your root domain.

    DO NOT include www or http://www in this field. Your domain needs to match the domain of your FROM address on the emails you are sending out.

    For example, if I am sending an email from, I would set my domain authentication domain to be Click "Next".

  5. Next, you need to add all of the CNAME records on this screen to your DNS host.

    This process varies depending on your DNS host.

    If you don't have access to modify your companies DNS records, you can also email a request to a co-worker. This email includes a direct link to the CNAME records. This link does expire. The recipient doesn't need login access to your SendGrid account.

2.1 Example DKIM Record: Automated Security ON


2.2 Example DKIM Record: Automated Security OFF

s1.domainkey.<>.TXTk=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDPtW5iwpXVPiH5FzJ7Nrl8USzuY9zqqzjE0D1r04xDN6qwziDnmgcFNNfMewVKN2D1O+2J9N14hRprzByFwfQW76yojh54Xu3uSbQ3JP0A7k8o8GutRF8zbFUA8n0ZH2y0cIEjMliXY4W4LwPA7m4q0ObmvSjhd63O9d8z1XkUBwIDAQAB ~all

* Please ensure that you change <> to the correct domain before publishing changes.