Brevo Email Authentication Setup

Brevo (formerly Sendinblue) is an all-in-one marketing and transactional email platform. This guide covers the complete email authentication stack for Brevo: SPF, DKIM, and DMARC. Each section gives you the exact DNS records, step-by-step instructions, common pitfalls, and how to verify your setup.

Jump to a Protocol

SPF

Authorize which servers can send email for your domain.

DKIM

Cryptographically sign your outgoing email so receivers can verify it.

DMARC

Tell receivers what to do when SPF or DKIM fail.

SPFTest with our SPF Checker →

How to Set Up SPF for Brevo (formerly Sendinblue)

Authorize Brevo to send marketing and transactional email on behalf of your domain via domain authentication.

Quick Answer — The Record You Need

Type

TXT

Host / Name

Value

v=spf1 include:spf.sendinblue.com ~all

Brevo still uses the sendinblue.com domain for SPF. The include is spf.sendinblue.com.

Step-by-Step Setup

Log in to Brevo

Go to app.brevo.com and sign in to your account.

Navigate to domain authentication

Go to Settings > Senders, Domains & Dedicated IPs > Domains. Click "Add a domain" or select your existing domain.

View the required DNS records

Brevo will display the SPF record you need to add. The include value is spf.sendinblue.com.

Add Brevo to your SPF record

Add include:spf.sendinblue.com to your existing SPF record.

v=spf1 include:spf.sendinblue.com ~all

Verify in Brevo

Click "Verify" in Brevo. The platform will check your DNS records.

Before & After

Before

v=spf1 include:_spf.google.com ~all

After

v=spf1 include:_spf.google.com include:spf.sendinblue.com ~all

SPF Gotchas

Brevo still uses spf.sendinblue.com for the SPF include despite the rebrand from Sendinblue. Do not use spf.brevo.com.
If your Brevo account shows a different include value in the domain settings, use that value instead. Brevo may update the include during migrations.
Brevo domain authentication handles both SPF and DKIM. Complete the full authentication process for best results.

SPF FAQ

What SPF record do I need for Brevo?

Add include:spf.sendinblue.com to your SPF record. Despite the rebrand, the SPF include still uses the sendinblue.com domain.

Did the SPF include change when Sendinblue became Brevo?

No. The SPF include remains spf.sendinblue.com. Check your Brevo account for the most current value.

Can I use Brevo with other email providers in my SPF?

Yes. Combine includes in a single SPF record: v=spf1 include:_spf.google.com include:spf.sendinblue.com ~all.

DKIMTest with our DKIM Checker →

How to Set Up DKIM for Brevo (formerly Sendinblue)

Enable DKIM for Brevo by publishing a TXT record that allows Brevo to cryptographically sign your email.

Quick Answer — The Record You Need

Type

TXT

Host / Name

mail._domainkey

Value

v=DKIM1; k=rsa; p=YOUR_PUBLIC_KEY_FROM_BREVO

Brevo provides the DKIM TXT record during domain authentication. The selector is typically "mail".

Step-by-Step Setup

Log in to Brevo

Go to app.brevo.com and sign in.

Navigate to domain settings

Go to Settings > Senders, Domains & Dedicated IPs > Domains.

View the DKIM record

Select your domain. Brevo displays the DKIM TXT record with the selector and public key value.

Add the TXT record to DNS

Create a TXT record in your DNS provider.

mail._domainkey.yourdomain.com  TXT  "v=DKIM1; k=rsa; p=MIGfMA0GCS..."

Verify in Brevo

Click "Verify" in Brevo. Once verified, DKIM signing activates.

DKIM Gotchas

Brevo typically uses "mail" as the DKIM selector, but always check the exact value shown in your account dashboard.
Brevo DKIM uses a TXT record, not a CNAME. Copy the exact value from your Brevo settings.
The DKIM record is part of the overall domain authentication process. Complete all records (SPF, DKIM, and DMARC) provided by Brevo.

DKIM FAQ

What DKIM selector does Brevo use?

Brevo typically uses "mail" as the DKIM selector. The record is published at mail._domainkey.yourdomain.com as a TXT record.

Is the Brevo DKIM record a TXT or CNAME?

Brevo uses a TXT record for DKIM, containing the public key directly.

Can I rotate DKIM keys in Brevo?

Contact Brevo support for DKIM key rotation. New keys can be generated in the domain settings.

DMARCTest with our DMARC Checker →

How to Set Up DMARC for Brevo (formerly Sendinblue)

Publish a DMARC record to protect your domain when sending email through Brevo.

Quick Answer — The Record You Need

Type

TXT

Host / Name

_dmarc

Value

v=DMARC1; p=none; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=1

Complete Brevo domain authentication before enforcing DMARC.

Step-by-Step Setup

Complete Brevo domain authentication

Set up SPF and DKIM through Brevo domain settings.

Test email authentication

Send a test email from Brevo and verify authentication passes in the headers.

Create the DMARC record

Add a TXT record at _dmarc.yourdomain.com.

v=DMARC1; p=none; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=1

Monitor reports

Review DMARC reports for 2-4 weeks.

Enforce gradually

Move from p=none to p=quarantine to p=reject.

DMARC Gotchas

Brevo includes a DMARC record suggestion in its domain authentication wizard. Follow their recommendation and customize as needed.
Without domain authentication, Brevo emails use sendinblue.com in the envelope sender, causing DMARC alignment failure.
If you use Brevo for both marketing and transactional email, both types need to pass DMARC.

DMARC FAQ

Does Brevo support DMARC alignment?

Yes, when domain authentication is complete. DKIM signs with your domain and SPF can align with a properly configured envelope sender.

Does Brevo require DMARC?

Brevo strongly recommends DMARC for better deliverability. It is required by Google and Yahoo for bulk senders.

Do I need a separate DMARC record for Brevo?

No. DMARC is one record per domain that covers all senders.

Verify Your Brevo Setup

Once your SPF, DKIM, and DMARC records are in place, run a full domain scan to confirm everything is configured correctly. DNS changes typically propagate within minutes but can take up to 48 hours.

Setup Guides for Other Providers

Google Workspace Microsoft 365 SendGrid Mailchimp Mailgun Amazon SES Postmark HubSpot Zendesk Zoho Mail Salesforce Constant Contact All Guides →