Popular email marketing platform owned by Intuit for campaigns and automations. This guide covers the complete email authentication stack for Mailchimp: SPF, DKIM, and DMARC. Each section gives you the exact DNS records, step-by-step instructions, common pitfalls, and how to verify your setup.
Authorize Mailchimp to send marketing email on behalf of your domain by adding the correct SPF include mechanism.
TXT
@
v=spf1 include:servers.mcsv.net ~all
Add include:servers.mcsv.net to your existing SPF record. Do not create a second SPF record.
Go to mailchimp.com and sign in to your account.
Go to Account > Settings > Domains. Click "Add & Verify Domain" or select your existing domain.
Look up your current SPF record to see if one already exists.
dig TXT yourdomain.com +short | grep spfAdd include:servers.mcsv.net to your existing SPF record. If you have no SPF record, create a new TXT record at @.
v=spf1 include:_spf.google.com include:servers.mcsv.net ~allReturn to Mailchimp domain settings and click "Verify". Mailchimp will confirm the SPF record is detected.
v=spf1 include:_spf.google.com ~allv=spf1 include:_spf.google.com include:servers.mcsv.net ~allAdd include:servers.mcsv.net to your SPF record. For example: v=spf1 include:servers.mcsv.net ~all. Combine it with your other email providers in a single SPF record.
While Mailchimp can send without your SPF record, adding it improves deliverability and helps pass DMARC alignment checks.
servers.mcsv.net is Mailchimp's SPF include domain. The mcsv abbreviation stands for MailChimp Server. It authorizes all of Mailchimp's mail servers to send on your behalf.
Enable DKIM signing for Mailchimp by publishing a CNAME record that allows Mailchimp to cryptographically sign your outgoing marketing email.
CNAME
k1._domainkey
dkim.mcsv.net
Mailchimp provides the exact CNAME record in your account under domain authentication settings.
Go to mailchimp.com and sign in.
Navigate to Account > Settings > Domains. Select your domain or click "Add & Verify Domain".
Mailchimp will display a CNAME record for DKIM. The selector is typically k1.
Create a CNAME record in your DNS provider.
k1._domainkey.yourdomain.com CNAME dkim.mcsv.netClick "Verify" in Mailchimp. Once DNS propagates, Mailchimp will confirm DKIM is active.
Mailchimp typically uses k1 as the DKIM selector. The record is published as a CNAME at k1._domainkey.yourdomain.com pointing to dkim.mcsv.net.
Yes. DKIM is important for deliverability and required for DMARC alignment. Without DKIM, your Mailchimp emails may land in spam folders.
No. Mailchimp assigns the DKIM selector. You must use the one provided in your domain authentication settings.
Publish a DMARC record to protect your domain when sending marketing email through Mailchimp.
TXT
_dmarc
v=DMARC1; p=none; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=1
Complete Mailchimp domain authentication (SPF + DKIM) before enforcing DMARC.
Ensure both SPF and DKIM are configured and verified in Mailchimp before setting up DMARC.
Send a test email through Mailchimp and inspect the headers to confirm SPF and DKIM pass with your domain.
Add a TXT record at _dmarc.yourdomain.com.
v=DMARC1; p=none; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=1Analyze DMARC aggregate reports for 2-4 weeks. Verify Mailchimp emails show aligned passes.
Gradually move from p=none to p=quarantine and then p=reject once all legitimate senders pass.
Yes, when you complete Mailchimp domain authentication. This ensures the DKIM d= domain and SPF envelope sender align with your From domain.
Only if domain authentication is not complete. With proper SPF and DKIM configured through Mailchimp, your emails will pass DMARC and be delivered normally.
No. DMARC is a single record per domain that applies to all email sent from that domain, regardless of provider. One DMARC record covers all your sending services.
Once your SPF, DKIM, and DMARC records are in place, run a full domain scan to confirm everything is configured correctly. DNS changes typically propagate within minutes but can take up to 48 hours.