Set Up Email Domain Authentication

To help your emails reach your recipients' inbox, set up email authentication for your custom domain.

This article covers:

• Terms you’ll come across while setting up email domain authentication
• How email domain authentication works
• How to find email domain authentication instructions
• How to copy information from Mailchimp and paste it into your domain’s CNAME and TXT records
• How to know if your email domain authentication was successful
• Resources from common domain providers
• Troubleshooting tips if authentication isn’t working

Definitions

Email domain authentication
The process that email providers use to validate the authenticity of an email sender. This is achieved by adding records to the Domain Name System (DNS).

Email domain verification
A required validation process that Mailchimp uses to make sure you’re sending emails from a legitmate email address that you have access to. This is achieved by clicking a link in a verification email, or entering a verification code into your Mailchimp account. This happens before domain authentication.

DNS record
A Domain Name System (DNS) record is a piece of information that connects a domain name to an IP address. DNS records are stored on DNS servers, which act as an internet directory.

CNAME record
A type of DNS record that links 2 domains. When you authenticate your email domain with Mailchimp, you’ll add 2 CNAME records to your domain's DNS records to prove ownership over your domain.

DKIM
DomainKeys Identified Mail (DKIM) authentication is a sender identification tool that protects email senders and their recipients from spam, forgery, and phishing. This includes CNAME records.

TXT record
A text record (TXT) is a type of DNS record that stores text-based information associated with a domain name. When you authenticate your email domain with Mailchimp, you’ll add 1 TXT record to your domain's DNS records to prove ownership over your domain.

DMARC
Domain-based Message Authentication, Reporting & Conformance (DMARC) is a method of email authentication to show that an email you send is from the real you. This includes TXT records.

To learn more about these terms and the domain authentication process, check out About Email Domain Authentication.

How it works

Email hosting services want use security processes to filter malicious senders and spam. If you send emails from an unauthenticated domain, you may experience delivery issues. Domain authentication proves that you're a legitimate sender, and it can improve your email delivery.

Email domain authentication with Mailchimp requires you to add 2 CNAME records and 1 TXT record to your domain’s DNS records. To accomplish this, find custom authentication instructions in your Mailchimp account, copy domain information, then paste it into your domain’s DNS records.

Authentication can only be added to domains that you or your business own and control. Public email services like Gmail and Yahoo can't be authenticated. Learn more about the limitations of free email addresses.

Domain authentication is different from domain verification. With Mailchimp, you’re required to verify your email domain, but this doesn’t impact your email delivery. For best email delivery results, we suggest that you verify and authenticate your email domain.

Verify your email domain

Before you authenticate your email domain, you need to verify it. This is how we make sure you have permission to send email from your email domain.

Authenticate your email domain

The steps to authenticate your email domain vary based on your domain provider. On the Domains page in your Mailchimp account, we'll provide you with instructions based on your domain provider. If your provider isn’t listed, we’ll provide basic steps.

Find domain authentication instructions

1. Click your profile icon and choose Account & billing. If you're an account Manager, click Account.
2. Click Domains.
3. Click Start authentication next to the verified email domain you want to work with.
4. In the Select your domain provider section, click the Select your DNS provider drop-down and choose your provider. If your domain provider isn't listed, choose Other.
5. Click Next.

After you choose your domain provider, customized authentication instructions appear. If you choose Other, basic authentication instructions appear. Click each step for details.

Copy and paste CNAME information

1. In a new browser window or tab, access your domain provider's website and find your domain's records. On the Domains page of your Mailchimp account, we provide guidance on how to find the domain records for some providers. If you need additional support to find your domain records, contact your domain provider.
2. Go back to the authentication instructions in your Mailchimp account and click Next.
3. Follow the instructions to create a new DKIM record. This is how you add 2 new CNAME records to your email domain, and it’s how Mailchimp directs your email to the right place. This step takes place on your domain provider’s website.
4. Go back to the authentication instructions in your Mailchimp account.
5. Click Copy next to the Name field for CNAME 1.
6. Paste the information into the appropriate field for the first CNAME record you created on your domain provider’s website. This field may be called Name, Host, Hostname, or Host record depending on your domain provider.
7. Go back to the authentication instructions in your Mailchimp account.
8. Click Copy next to the Value field for CNAME 1.
9. Paste the information into the appropriate field for the first CNAME record you created on your domain provider’s website. This field may be called Value, Data, or Points To depending on your domain provider.
10. Repeat steps 4-9 for CNAME 2.
11. Go back to the authentication instructions in your Mailchimp account.
12. Click Next.

Copy and paste TXT information

1. Follow the instructions to create a new DMARC record. This is how you add a new TXT record to your email domain, and it helps ensure proper delivery of your emails. This step takes place on your domain provider’s website.
2. Go back to the authentication instructions in your Mailchimp account.
3. Click Copy next to the Host field for your TXT record in Mailchimp.
4. Paste the information into the appropriate field for the TXT record you created on your domain provider’s website. This field may be called Host.
5. Go back to the authentication instructions in your Mailchimp account.
6. Click Copy next to the Points To field for your TXT record in Mailchimp.
7. Paste the information into the appropriate field for the TXT record you created on your domain provider’s website. This field may be called Points To.
8. Go back to the authentication instructions in your Mailchimp account.
9. Click Next.

Great work! It can take up to 48 hours to validate your email domain authentication records, though this process is typically quicker.

Confirm your email domain authentication

Your email domain is authenticated when Mailchimp confirms that your records are updated and correct.

If authentication is successful, the Authenticated label appears next to the domain in your Mailchimp account. We’ll also send you an email to confirm.

If authentication is unsuccessful, a message appears on the Domains page of your Mailchimp account to provide you with next steps. We’ll also send you an email that details the issues to resolve.

Resources from common domain providers

Here are some authentication resources from common domain providers. If your service isn't listed, search your provider's site for help documents, or contact their support team for additional Support.

Amazon Web Services: Configuring DNS, Resource Record Types

Bluehost Bluerock: Manage DNS Records

Bluehost Legacy: DNS Management

Dreamhost: DNS Overview

GoDaddy: Add a CNAME Record

Google Domains: DNS Basics

Hostgator: Manage DNS records

Hover: Edit DNS Record

IONOS: Configuring CNAME Records

Namecheap: SPF & DKIM

Squarespace: Advanced DNS Settings

Stablehost: How do I get to cpanel?

Wordpress: Adding Custom DNS Records

Siteground: Create CNAME Records

Wix: Adding or updating CNAME Records

Troubleshooting

• My CNAME record isn’t updating when I create the domain key.
  Depending on your domain provider, you may only need to use part of the information in the Name field. For example, if you enter “k2._domainkey.example.com” and “k2._domainkey.example.com.example.com” is created, update your CNAME record to only include “k2._domainkey”.

• My records are all correct, but my domain won’t authenticate in Mailchimp.
  If you've entered all records correctly and your authentication isn't working right away, there typically isn't a cause for concern. You may need to wait a bit longer (up to 48 hours) since it can take awhile for servers to recognize your changes.

If you still additional support, check out your domain provider's help site for tips on troubleshooting DNS records in their service.