Search

Authenticate your domain with Brevo (Brevo code, DKIM, DMARC)

❗️ Important
Domain authentication is mandatory as part of Gmail, Yahoo, and Microsoft's requirements for email senders. To learn more, check our dedicated article Comply with Gmail, Yahoo, and Microsoft's requirements for email senders.

Domain authentication helps improve email deliverability and protects your domain from spoofing and phishing. If you’re not familiar with domain authentication, we recommend starting with our FAQ article About domain authentication (Brevo code, DKIM, DMARC) to learn more about what it is and common terms used.

📹 Watch the video below or follow the written instructions to authenticate your domain with Brevo:

Before you start

You can only authenticate a domain that you or your business own and control. Domains from free email services, such as Gmail or Yahoo (e.g., @gmail.com or @yahoo.com), cannot be authenticated.

If you don’t have your own domain yet, you will need to purchase one. To learn more, check our dedicated article Why you need to replace your free email address with a professional one.

Step 1: Add your domain to Brevo

First, add the domain you use to send emails to the Domains page in Brevo:

  1. In Brevo, click the account dropdown and select Settings > Senders, Domains, IPs > Domains.
  2. Click Add a domain. If your domain already appears on the page, click Authenticate next to it instead.
    authencate_new_add-domain_en-us.jpeg
  3. Enter the name of your domain. This is typically the part of your email address that comes after the "@" symbol. For example, if your email address is marketing@mycompany.com, the domain you need to add is mycompany.com.
    authenticate_new_domain-name_en-us.jpeg
  4. Click Add domain.

Step 2: Authenticate your domain

We strongly recommend using automatic authentication whenever it’s available. Manual authentication should be used only if automatic setup is not available with your domain provider or if you prefer to configure DNS records yourself.

Brevo offers two methods to authenticate your domain:

  • Authenticate the domain automatically (default and recommended option)
    In most cases, Brevo can authenticate your domain in a few clicks by connecting securely to your domain provider. Automatic authentication is faster, safer, and avoids common DNS configuration errors.
  • Authenticate the domain manually
    Manual authentication is only needed if Brevo cannot authenticate your domain automatically. You will need to copy and paste each DNS record from Brevo to your domain’s settings. Alternatively, you can ask someone else, such as your IT team or domain provider’s support team, to complete the authentication.

Option 1: Authenticate the domain automatically (default and recommended option)

To authenticate your domain automatically, simply log in to your domain provider’s account directly from Brevo. Brevo will detect your provider, add the required DNS records (Brevo code, DKIM, DMARC), and verify the configuration. No manual DNS changes are needed.

To authenticate your domain automatically:

  1. Select Authenticate the domain automatically.
  2. Click Continue. A pop-up window appears.
  3. Click Continue. Brevo automatically detects your domain provider.
  4. Enter the credentials of your domain provider's account. If you're unsure what your domain provider is, check our dedicated article Identify your domain provider.
  5. Click Continue. All required DNS records are added to your domain.
    ❗️ Important
    If your domain already has a DMARC record, you'll be asked if you want to replace it with Brevo's DMARC record. If you don't want to replace your existing DMARC record with Brevo's, you need to authenticate your domain manually instead.
  6. From the confirmation page, click Back to domain listing.

Your domain is now authenticated, and you do not need to do anything else.

auth_domain-status_en-us.png

Option 2: Authenticate the domain manually

💡 Good to know
Manual authentication is only required if Brevo cannot authenticate your domain automatically. Alternatively, you can select Ask someone else to authenticate the domain to have instructions sent to another person, such as your IT team or your domain provider’s support. No Brevo account is needed, but they need access to your domain provider account.

To authenticate your domain manually, select Authenticate the domain yourself. You will need to copy and paste specific DNS records from Brevo into your domain provider's account. Depending on your Brevo account, you may need to add three or four records.

The table below outlines the DNS records used to authenticate a domain in Brevo and their respective purposes:

Name Type Purpose
Brevo code TXT Verifies that you own and control your sending domain
DKIM record 1 TXT or 2 CNAME Digitally signs emails to ensure they aren’t modified after sending
DMARC record TXT Tells mail servers how to handle suspicious emails based on your DMARC policy (none, quarantine, or reject)

Step 1: Add the Brevo code, DKIM, and DMARC to your domain

💡 Good to know
Some steps of this process happen outside of Brevo, directly in your domain provider’s account.

Depending on your provider, the exact steps and information needed to add DNS records may vary.

Use the following dropdowns to find step-by-step instructions for your domain provider. If your provider isn’t listed, select the Other option for generic guidance ⬇️. 

Amazon Route 53
❗️ Important
Amazon Route 53 doesn't allow adding a record with the same type and name twice. If you have to add an extra record with the same type and name as another, enter the value of the extra record on a separate line below the first record.

To authenticate your domain in Amazon Route 53:

  1. Open a new tab in your web browser and log in to your Amazon Web Services account.
  2. Open the Route 53 console.
  3. In the left-side panel, select Hosted zones. This is where you'll add your DNS records.
    aws_access-domain.jpg

  4. Select the domain you want to authenticate.

Add the Brevo code

  1. In Amazon Route 53, click Create record.
  2. In Brevo, click Copy Brevo code name next to the Record name field and paste it into the Record name field in Amazon Route 53, or leave the field empty if instructed to do so.
  3. In Amazon Route 53, select TXT from the Record type dropdown.
  4. In Brevo, click Copy Brevo code value from the Value field and paste it into the Value field in Amazon Route 53.
    aws_brevo-code.jpeg
  5. In Amazon Route 53, leave the TTL and Routing policy fields as is.

  6. In Amazon Route 53, click Create record.

Add the DKIM record

You will follow the same process for the DKIM record as you did for the Brevo code.

Different types of DKIM records may appear in your Brevo account:

  • DKIM 1 record and DKIM 2 record (CNAME type)
  • DKIM record (TXT type)

Select the tab that matches the DKIM records shown on your screen to view the correct instructions ⬇️:

DKIM 1 record and DKIM 2 record (CNAME type)DKIM record (TXT type)

Add two DKIM records of CNAME type:

DKIM 1 record

  1. In Amazon Route 53, click Create record.
  2. In Brevo, click Copy DKIM 1 record name next to the Record name field and paste it into the Record name field in Amazon Route 53.
  3. In Amazon Route 53, select CNAME from the Record type dropdown.
  4. In Brevo, click Copy DKIM record value next to the Value field and paste it into the Value field in Amazon Route 53.
    aws_dkim-record (1).jpeg

  5. In Amazon Route 53, leave the TTL and Routing policy fields as they are.

  6. In Amazon Route 53, click Create record.

DKIM 2 record

  1. In Amazon Route 53, click Create record.
  2. In Brevo, click Copy DKIM 2 record name next to the Record name field and paste it into the Record name field in Amazon Route 53.
  3. In Amazon Route 53, select CNAME from the Record type dropdown.
  4. In Brevo, copy Copy DKIM 2 record value next to the Value field and paste it into the Value field in Amazon Route 53.
    aws_dkim2-record_en-us copy.jpeg

  5. In Amazon Route 53, leave the TTL and Routing policy fields as they are.

  6. In Amazon Route 53, click Create record.

Add the DMARC record

You will follow the same process for the DMARC record as you did for the Brevo code and DKIM record.

  1. In Amazon Route 53, click Create record.
  2. In Brevo, click Copy DMARC record name next to the Record name field and paste it into the Record name field in Amazon Route 53.
  3. In Amazon Route 53, select TXT from the Record type dropdown.
  4. In Brevo, click Copy DMARC record value next to the Value field and paste it into the Value field in Amazon Route 53.
    aws_dmarc-record (1).jpg

  5. In Amazon Route 53, leave the TTL and Routing policy fields as is.

  6. In Amazon Route 53, click Create record.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

Amen

To authenticate your domain in Amen:

  1. Open a new tab in your web browser and log in to your Amen account.
  2. Under Domaines (Domain), select the domain you want to authenticate.
    amen_domaines.png
  3. Select Domaines et DNS (Domains and DNS).
    amen_domaines_dns.png
  4. Select Configuration DNS (DNS configuration).
    amen_dns_config.png
  5. Go to the Gestion avancée (Advanced management) tab. This is where you'll add your DNS records.
    amen_advanced.png

Add the Brevo code

  1. In Amen, click Ajouter un enregistrement (Add a record).
  2. In Brevo, click Copy Brevo code name next to the Name field and paste it into the Nom (Name) field in Amen.
  3. In Amen, select TXT.
  4. In Brevo, click Copy Brevo code value from the Value field and paste it into the Valeur (Value) field in Amen.
    amen_brevo-code.jpg
  5. In Amen, leave the Type/Valeur par défaut (Type/Default value) field as is.
  6. In Amen, click Valider (Confirm).

Add the DKIM record

You will follow the same process for the DKIM record as you did for the Brevo code.

Different types of DKIM records may appear in your Brevo account:

  • DKIM 1 record and DKIM 2 record (CNAME type)
  • DKIM record (TXT type)

Select the tab that matches the DKIM records shown on your screen to view the correct instructions.

DKIM 1 record and DKIM 2 record (CNAME type)DKIM record (TXT type)

Add two DKIM records of CNAME type:

DKIM 1 record

  1. In Amen, click Ajouter un enregistrement (Add a record).
  2. In Brevo, click Copy DKIM 1 record name next to the Name field and paste it into the Nom (Name) field in Amen.
  3. In Amen, select CNAME.
  4. In Brevo, click Copy DKIM 1 record value next to the Value field and paste it into the Valeur (Value) field in Amen.
    amen_dkim-record.jpg
  5. In Amen, leave the Type/Valeur par défaut (Type/Default value) field as is.
  6. In Amen, click Valider (Confirm).

DKIM 2 record

  1. In Amen, click Ajouter un enregistrement (Add a record).
  2. In Brevo, click Copy DKIM 2 record name next to the Name field and paste it into the Nom (Name) field in Amen.
  3. In Amen, select CNAME.
  4. In Brevo, click Copy DKIM 2 record value next to the Value field and paste it into the Valeur (Value) field in Amen.
    amen_dkim2-record.jpeg
  5. In Amen, leave the Type/Valeur par défaut (Type/Default value) field as is.
  6. In Amen, click Valider (Confirm).

Add the DMARC record

You will follow the same process for the DMARC record as you did for the Brevo code and DKIM record.

  1. In Amen, click Ajouter un enregistrement (Add a record).
  2. In Brevo, click Copy the DMARC record name next to the Name field and paste it into the Nom (Name) field in Amen.
  3. In Amen, select TXT.
  4. In Brevo, click Copy the DMARC record value next to the Value field and paste it into the Valeur (Value) field in Amen.
    amen_dmarc-record.jpg
  5. In Amen, leave the Type/Valeur par défaut (Type/Default value) field as is.
  6. In Amen, click Valider (Confirm).

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

Bluehost

To authenticate your domain in Bluehost:

  1. Open a new tab in your web browser and log in to your Bluehost account.
  2. In the left-side panel, click Domains.
  3. At the bottom of the page, open the Advanced Tools dropdown.
  4. Next to Advanced DNS Records, click Manage. This is where you'll add your DNS records.
    bluehost_access.jpg
  5. (Optional) If a warning message is shown, click Continue.

Add the Brevo code

  1. In Bluehost, click + Add Record.
  2. In Bluehost, click TXT from the Type dropdown.

  3. In Brevo, locate the value in the Host Record field and select the same value from the Refers to dropdown in Bluehost. If the value isn't listed, select Other Hosts. Then, in Brevo, click Copy Brevo code host record and paste it into the Host Name field in Bluehost.

  4. In Brevo, click Copy Brevo code TXT value next to the TXT value field and paste it into the TXT value field in Bluehost.
  5. In Bluehost, select 1 Hour from the TTL dropdown.
    bluehost_brevo-code.jpeg
  6. In Bluehost, click Add.

Add the DKIM record

You will follow the same process for the DKIM record as you did for the Brevo code.

Different types of DKIM records may appear in your Brevo account:

  • DKIM 1 record and DKIM 2 record (CNAME type)
  • DKIM record (TXT type)

Select the tab that matches the DKIM records shown on your screen to view the correct instructions ⬇️:

DKIM 1 record and DKIM 2 record (CNAME type)DKIM record (TXT type)

Add two DKIM records of CNAME type:

DKIM 1 record

  1. In Bluehost, click + Add Record.
  2. In Bluehost, select CNAME from the Type dropdown.
  3. In Bluehost, select Other Host from the Refers to dropdown.
  4. In Brevo, click Copy DKIM 1 record host record next to the Host Record field and paste it into the Host Name field in Bluehost.
  5. In Brevo, click Copy DKIM 1 record TXT value next to the TXT Value field and paste it into the Alias to field in Bluehost.
  6. In Bluehost, select 1 Hour from the TTL dropdown.
    bluehost_dkim-record.jpg
  7. In Bluehost, click Add.

DKIM 2 record

  1. In Bluehost, click + Add Record.
  2. In Bluehost, select CNAME from the Type dropdown.
  3. In Bluehost, select Other Host from the Refers to dropdown.
  4. In Brevo, click Copy DKIM 2 record host record next to the Host Record field and paste it into the Host Name field in Bluehost.
  5. In Brevo, click Copy DKIM 2 record TXT value next to the TXT Value field and paste it into the Alias to field in Bluehost.
  6. In Bluehost, select 1 Hour from the TTL dropdown.
    bluehost_dkim-record copy.jpg
  7. In Bluehost, click Add.

Add the DMARC record

You will follow the same process for the DMARC record as you did for the Brevo code and DKIM record.

  1. Click + Add Record.
  2. From the Type dropdown, select TXT.
  3. From the Refers to dropdown, select Other Host.
  4. In Brevo, click Copy DMARC record host record next to the Host Record field and paste it into the Host Name field in Bluehost.
  5. In Brevo, click Copy DMARC record TXT value next to the TXT value field and paste it into the TXT value field in Bluehost.
  6. From the TTL dropdown, select 1 Hour.
    bluehost_dmarc-record.jpg
  7. Click Add.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

Cloudflare

To authenticate your domain in Cloudflare:

  1. Open a new tab in your web browser and log in to your Cloudflare account.
  2. From your account home page, select the domain you want to authenticate.
  3. In the left-side panel, click DNS > Records. This is where you'll add your DNS records.
    cloudfare_dns-records_en-us.png

Add the Brevo code

  1. In Cloudflare, click Add record.
    cloudfare_add-record_en-us.png
  2. In Cloudflare, select TXT from the Type dropdown.
  3. In Brevo, click Copy Brevo code name next to the Name field and paste it into the Name field in Cloudflare.
  4. In Cloudflare, leave the TTL field as is.
  5. In Brevo, click Copy Brevo code content next to the Content field and paste it into the Content field in Cloudflare.
    cloudfare_brevo-code_en-us.png
  6. In Cloudfare, click Save.

Add the DKIM record

You will follow the same process for the DKIM record as you did for the Brevo code.

Different types of DKIM records may appear in your Brevo account:

  • DKIM 1 record and DKIM 2 record (CNAME type)
  • DKIM record (TXT type)

Select the tab that matches the DKIM records shown on your screen to view the correct instructions ⬇️:

DKIM 1 record and DKIM 2 record (CNAME type)DKIM record (TXT type)
❗️ Important
When using DKIM records of CNAME type, deactivate CNAME flattening in Cloudflare. If CNAME flattening is activated, Cloudflare converts the record to a TXT record, and DKIM authentication will fail. To learn more, check Cloudflare's documentation.

Add two DKIM records of CNAME type:

DKIM 1 record

  1. Click Add record.
  2. In Cloudflare, select CNAME from the Type dropdown.
  3. In Brevo, click Copy DKIM record 1 name next to the Name field and paste it into the Name field in Cloudflare.
  4. In Brevo, click Copy DKIM record 1 content next to the Content field and paste it into the Target field in Cloudflare.
  5. In Cloudflare, deactivate the Proxy status toggle.
    cloudfare_dkim_cname1_en-us.png
  6. Click Save.

DKIM 2 record

  1. Click Add record.
  2. In Cloudflare, select CNAME from the Type dropdown.
  3. In Brevo, click Copy DKIM record 2 name next to the Name field and paste it into the Name field in Cloudflare.
  4. In Brevo, click Copy DKIM record 2 content next to the Content field and paste it into the Target field in Cloudflare.
  5. In Cloudflare, deactivate the Proxy status toggle.cloudfare_dkim_cname2_en-us.png
  6. Click Save.

Add the DMARC record

You will follow the same process for the DMARC record as you did for the Brevo code and DKIM record.

  1. In Cloudflare, click Add record.
  2. In Cloudflare, select TXT from the Type dropdown.
  3. In Brevo, click Copy DMARC record name next to the Name field and paste it into the Name field in Cloudflare.
  4. In Cloudflare, leave the TTL field as is.
  5. In Brevo, click Copy DMARC record content next to the Content field and paste it into the Content field in Cloudflare.
    cloudfare_dmarc_en-us.png
  6. In Cloudflare, click Save.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

Gandi

To authenticate your domain in Gandi:

  1. Open a new tab in your web browser and log in to your Gandi account.
  2. In the left-side panel, select Domain.
    gandi_domain.png
  3. Select the domain you want to authenticate.
  4. Go to the DNS Records tab. This is where you'll add your DNS records.
    gandi_dns_records.jpg

Add the Brevo code

  1. In Gandi, click Add record.
  2. In Gandi, select TXT from the Type dropdown.
  3. In Gandi, leave the TTL and Unit fields as they are.
  4. In Brevo, click Copy Brevo code name next to the Name field and paste it into the Name field in Gandi.
  5. In Brevo, click Copy Brevo code text value next to the Text value field and paste it into the Text value field in Gandi.
    gandi_brevo-code.jpg
  6. In Gandi, click Save.

Add the DKIM record

You will follow the same process for the DKIM record as you did for the Brevo code.

Different types of DKIM records may appear in your Brevo account:

  • DKIM 1 record and DKIM 2 record (CNAME type)
  • DKIM record (TXT type)

Select the tab that matches the DKIM records shown on your screen to view the correct instructions ⬇️:

DKIM 1 record and DKIM 2 record (CNAME type)DKIM record (TXT type)

Add two DKIM records of CNAME type:

DKIM 1 record

  1. Click Add record.
  2. From the Type dropdown, select CNAME.
  3. Leave the TTL and Unit fields as they are.
  4. In Brevo, click Copy DKIM record 1 name next to the Name field and paste it into the Name field in Gandi.
  5. In Brevo, click Copy DKIM record 1 text value next to the Text value field and paste it into the Hostname field in Gandi.
    gandi_dkim-record (1).jpg
  6. Click Save.

DKIM 2 record

  1. Click Add record.
  2. From the Type dropdown, select CNAME.
  3. Leave the TTL and Unit fields as they are.
  4. In Brevo, click Copy DKIM record 2 name next to the Name field and paste it into the Name field in Gandi.
  5. In Brevo, click Copy DKIM record 2 text value next to the Text value field and paste it into the Hostname field in Gandi.
  6. gandi_dkim-record2.jpeg
  7. Click Save.

Add the DMARC record

You will follow the same process for the DMARC record as you did for the Brevo code and DKIM record.

  1. Click Add record.
  2. From the Type dropdown, select TXT.
  3. Leave the TTL and Unit fields as they are.
  4. In Brevo, click Copy DMARC record name next to the Name field and paste it into the Name field in Gandi.
  5. In Brevo, click Copy DMARC record text value next to the Text value field and paste it into the Text value field in Gandi.
    gandi_dmarc.jpg
  6. Click Save.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

GoDaddy

To authenticate your domain in GoDaddy:

  1. Open a new tab in your web browser and log in to your GoDaddy account. 
  2. Under All Products and Services, click DNS next to the domain you want to authenticate. This is where you'll add your DNS records.
    godaddy_access.jpg

Add the Brevo code

  1. In GoDaddy, click Add More Records.
  2. In GoDaddy, select TXT from the Type dropdown.
  3. In Brevo, click Copy Brevo code name next to the Name field and paste it into the Name field in GoDaddy.
  4. In Brevo, click Copy Brevo code value next to the Value field and paste it into the Value field in GoDaddy.
    godaddy_brevo-code.jpg
  5. In GoDaddy, leave the TTL field as is.
  6. In GoDaddy, click Save.

Add the DKIM record

You will follow the same process for the DKIM record as you did for the Brevo code.

Different types of DKIM records may appear in your Brevo account:

  • DKIM 1 record and DKIM 2 record (CNAME type)
  • DKIM record (TXT type)

Select the tab that matches the DKIM records shown on your screen to view the correct instructions ⬇️:

DKIM 1 record and DKIM 2 record (CNAME type)DKIM record (TXT type)

Add two DKIM records of CNAME type:

DKIM 1 record

  1. In GoDaddy, click Add New Record.
  2. In GoDaddy, select CNAME from the Type dropdown.
  3. In Brevo, click Copy DKIM 1 record name next to the Name field and paste it into the Name field in GoDaddy.
  4. In Brevo, click Copy DKIM 1 record value next to the Value field and paste it into the Value field in GoDaddy.
    godaddy_dkim-record.jpg
  5. In GoDaddy, leave the TTL field as is.
  6. In GoDaddy, click Save.

DKIM 2 record

  1. In GoDaddy, click Add New Record.
  2. In GoDaddy, select CNAME from the Type dropdown.
  3. In Brevo, click Copy DKIM 2 record name next to the Name field and paste it into the Name field in GoDaddy.
  4. In Brevo, click Copy DKIM 2 record value next to the Value field and paste it into the Value field in GoDaddy.godaddy_dkim-record2.jpeg
  5. In GoDaddy, leave the TTL field as is.
  6. In GoDaddy, click Save.

Add the DMARC record

You will follow the same process for the DMARC record as you did for the Brevo code and DKIM record.

  1. In GoDaddy, click Add New Record.
  2. In GoDaddy, select TXT from the Type dropdown.
  3. In Brevo, click Copy DMARC record name next to the Name field and paste it into the Name field in GoDaddy.
  4. In Brevo, click Copy DMARC record value next to the Value field and paste it into the Value field in GoDaddy.
    godaddy_dmarc-record.jpg
  5. In GoDaddy, leave the TTL field as is.
  6. In GoDaddy, click Save.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

Google Domains
❗️ Important
Google Domains doesn't allow adding a record with the same type and name twice. If you have to add an extra record with the same type and name as another, add it below the first one by clicking + Add more to this record and pasting the data in the new field.

To authenticate your domain in Google Domains:

  1. Open a new tab in your web browser and log in to your Google Domains account.
  2. Click Manage next to the domain you want to authenticate.
  3. In the sidebar menu, select DNS.
  4. Go to the Custom resource records section at the bottom of the page. This is where you'll add your DNS records.

Add the Brevo code

  1. In Brevo, click Copy Brevo code hostname next to the Host name field and paste it into the Name field in Google Domains.
  2. In Google Domains, select TXT from the Type dropdown.
  3. In Google Domains, leave the TTL field as is.
  4. In Brevo, click Copy Brevo code data next to the Data field and paste it into the Data field in Google Domains.
    google-domains_brevo-code (1).jpg
  5. In Google Domains, click Add.

Add the DKIM record

You will follow the same process for the DKIM record as you did for the Brevo code.

Different types of DKIM records may appear in your Brevo account:

  • DKIM 1 record and DKIM 2 record (CNAME type)
  • DKIM record (TXT type)

Select the tab that matches the DKIM records shown on your screen to view the correct instructions ⬇️:

DKIM 1 record and DKIM 2 record (CNAME type)DKIM record (TXT type)

Add two DKIM records of CNAME type:

DKIM 1 record

  1. In Brevo, click Copy DKIM 1 record hostname next to the Host name field and paste it into the Host name field in Google Domains.
  2. In Google Domains, select CNAME from the Type dropdown.
  3. In Google Domains, leave the TTL field as is.
  4. In Brevo, click Copy DKIM 1 record data next to the Data field and paste it into the Data field in Google Domains.
    google-domains_dkim-record (1).jpg
  5. In Google Domains, click Save.

DKIM 2 record

  1. In Brevo, click Copy DKIM 2 record hostname next to the Host name field and paste it into the Host name field in Google Domains.
  2. In Google Domains, select CNAME from the Type dropdown.
  3. In Google Domains, leave the TTL field as is.
  4. In Brevo, click Copy DKIM 2 record data next to the Data field and paste it into the Data field in Google Domains.google-domains_dkim-record2.jpeg
  5. In Google Domains, click Save.

Add the DMARC record

You will follow the same process for the DMARC record as you did for the Brevo code and DKIM record.

  1. In Brevo, click Copy DMARC record hostname next to the Host name field and paste it into the Host name field in Google Domains.
  2. In Google Domains, select TXT from the Type dropdown.
  3. In Google Domains, leave the TTL field as is.
  4. In Brevo, click Copy DMARC record data next to the Data field and paste it into the Data field in Google Domains.
    google-domains_dmarc-record (1).jpg
  5. In Google Domains, click Save.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

Hostinger

To authenticate your domain in Hostinger:

  1. Open a new tab in your web browser and log in to your Hostinger account.
  2. Under Domain, click Manage next to the domain you want to authenticate.
    hostinger_access1.jpg
  3. In the left-side panel, click DNS/Nameservers. This is where you'll add your DNS records.
    hostinger_access2.jpg

Add the Brevo code

  1. In Hostinger, under Manage DNS records, select TXT from the Type dropdown.
  2. In Brevo, click Copy Brevo code name next to the Name field and paste it into the Name field in Hostinger.
  3. In Brevo, click Copy Brevo code TXT value next to the TXT value field and paste it into the TXT value field in Hostinger.
    hostinger_brevo-code (1).jpg
  4. In Hostinger, leave the TTL field as is.
  5. In Hostinger, click Add Record.

Add the DKIM record

You will follow the same process for the DKIM record as you did for the Brevo code.

Different types of DKIM records may appear in your Brevo account:

  • DKIM 1 record and DKIM 2 record (CNAME type)
  • DKIM record (TXT type)

Select the tab that matches the DKIM records shown on your screen to view the correct instructions ⬇️:

DKIM 1 record and DKIM 2 record (CNAME type)DKIM record (TXT type)

Add two DKIM records of CNAME type:

DKIM 1 record

  1. In Hostinger, under Manage DNS records, select CNAME from the Type dropdown.
  2. In Brevo, click Copy DKIM 1 record name next to the Name field and paste it into the Name field in Hostinger.
  3. In Brevo, click Copy DKIM 1 record TXT value next to the TXT value field and paste it into the TXT value field in Hostinger.
    hostinger_dkim-record (1).jpg
  4. In Hostinger, leave the TTL field as is.
  5. In Hostinger, click Add Record.

DKIM 2 record

  1. In Hostinger, under Manage DNS records, select CNAME from the Type dropdown.
  2. In Brevo, click Copy DKIM 2 record name next to the Name field and paste it into the Name field in Hostinger.
  3. In Brevo, click Copy DKIM 2 record TXT value next to the TXT value field and paste it into the TXT value field in Hostinger.hostinger_dkim-record (1) (1).jpg
  4. In Hostinger, leave the TTL field as is.
  5. In Hostinger, click Add Record.

Add the DMARC record

You will follow the same process for the DMARC record as you did for the Brevo code and DKIM record.

  1. In Hostinger, under Manage DNS records, select TXT from the Type dropdown.
  2. In Brevo, click Copy DKIM record name next to the Name field and paste it into the Name field in Hostinger.
  3. In Brevo, click Copy DKIM record data next to the TXT value field and paste it into the TXT value field in Hostinger.
    hostinger_dmarc-record (1).jpg
  4. In Hostinger, leave the TTL field as is.
  5. In Hostinger, click Add Record.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

IONOS

To authenticate your domain in IONOS:

  1. Open a new tab in your web browser and log in to your IONOS account.
  2. Click Domains & SSL.
    ionos_access-domain_en-us.jpg
  3. Next to the domain you want to authenticate, click the ⚙️ gear icon and select DNS. This is where you'll add your DNS records.
    ionos_dns_en-us.jpg

Add the Brevo code

  1. Click Add record.
  2. Select TXT.
  3. In Brevo, click Copy Brevo code hostname next to the Hostname field and paste it into the Host name field in IONOS.
  4. In Brevo, click Copy Brevo code value next to the Value field and paste it into the Value field in IONOS.
    ionos_brevo-code.jpg
  5. Leave the TTL field as is.
  6. Click Save.

Add the DKIM record

You will follow the same process for the DKIM record as you did for the Brevo code.

Different types of DKIM records may appear in your Brevo account:

  • DKIM 1 record and DKIM 2 record (CNAME type)
  • DKIM record (TXT type)

Select the tab that matches the DKIM records shown on your screen to view the correct instructions ⬇️:

DKIM 1 record and DKIM 2 record (CNAME type)DKIM record (TXT type)

Add two DKIM records of CNAME type:

DKIM 1 record

  1. Click Add record.
  2. Select CNAME.
  3. In Brevo, click Copy DKIM 1 record hostname next to the Hostname field and paste it into the Host name field in IONOS.
  4. In Brevo, click Copy DKIM 1 record value next to the Value field and paste it into the Points to field in IONOS.
    ionos_DKIM-record.jpg
  5. Leave the TTL field as is.
  6. Click Save.

DKIM 2 record

  1. Click Add record.
  2. Select CNAME.
  3. In Brevo, click Copy DKIM 2 record hostname next to the Hostname field and paste it into the Host name field in IONOS.
  4. In Brevo, click Copy DKIM 2 record value next to the Value field and paste it into the Points to field in IONOS.ionos_DKIM-record (1).jpg
  5. Leave the TTL field as is.
  6. Click Save.

Add the DMARC record

You will follow the same process for the DMARC record as you did for the Brevo code and DKIM record.

  1. Click Add record.
  2. Select TXT.
  3. In Brevo, click Copy DMARC record hostname next to the Hostname field and paste it into the Host name field in IONOS.
  4. In Brevo, click Copy DMARC record value next to the Value field and paste it into the Value field in IONOS.
    ionos_dmarc-record.jpg
  5. Leave the TTL field as is.
  6. Click Save.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

OVH

To authenticate your domain in OVH:

  1. Open a new tab in your web browser and log in to your OVH account.
  2. Go to the Web Cloud tab.
  3. In the left-side panel, under Domain names, select the domain you want to authenticate.
  4. Go to the DNS zone tab. This is where you'll add your DNS records.
    ovh_access-dns_en-us.jpg

Add the Brevo code

  1. On the right-hand side, click Add an entry.
  2. Select TXT.
  3. In Brevo, click Copy Brevo code sub-domain next to the Sub-domain field and paste it into the Sub-domain field in OVH, or leave the field empty if instructed to do so.
  4. Leave the TTL field as is.
  5. In Brevo, click Copy Brevo code value next to the Value field and paste it into the Value field in OVH.
    ovh_brevo-code.jpg
  6. Click Next.
  7. Verify your information and click Confirm.

Add the DKIM record

You will follow the same process for the DKIM record as you did for the Brevo code.

Different types of DKIM records may appear in your Brevo account:

  • DKIM 1 record and DKIM 2 record (CNAME type)
  • DKIM record (TXT type)

Select the tab that matches the DKIM records shown on your screen to view the correct instructions ⬇️:

DKIM 1 record and DKIM 2 record (CNAME type)DKIM record (TXT type)

Add two DKIM records of CNAME type:

DKIM 1 record

  1. On the right-hand side, click Add an entry.
  2. Select CNAME.
  3. In Brevo, click Copy DKIM 1 record sub-domain next to the Sub-domain field and paste it into the Sub-domain field in OVH.
  4. Leave the TTL field as is.
  5. In Brevo, click Copy DKIM 1 record value next to the Value field and paste it into the Target field in OVH.
    ovh_dkim-record.jpg
  6. Click Next.
  7. Verify your information and click Confirm.

DKIM 2 record

  1. On the right-hand side, click Add an entry.
  2. Select CNAME.
  3. In Brevo, click Copy DKIM 2 record sub-domain next to the Sub-domain field and paste it into the Sub-domain field in OVH.
  4. Leave the TTL field as is.
  5. In Brevo, click Copy DKIM 2 record value next to the Value field and paste it into the Target field in OVH.ovh_dkim-record copy.jpg
  6. Click Next.
  7. Verify your information and click Confirm.

Add the DMARC record

You will follow the same process for the DMARC record as you did for the Brevo code and DKIM record.

  1. On the right-hand side, click Add an entry.
  2. Select TXT.
  3. In Brevo, click Copy DMARC record sub-domain next to the Sub-domain field and paste it into the Sub-domain field in OVH.
  4. Leave the TTL field as is.
  5. In Brevo, click Copy DMARC record value next to the Value field and paste it into the Value field in OVH.
    ovh_dmarc-record.jpg
  6. Click Next.
  7. Verify your information and click Confirm.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

Wix

To authenticate your domain on Wix:

  1. Open a new tab in your web browser and log in to your Wix account.
  2. Click your account dropdown and select Domains.
  3. Next to the domain you want to authenticate, click the three dots icon and select Manage DNS records. This is where you'll add your DNS records.
    wix_access.jpg

Add the Brevo code

  1. Under TXT (Text), click + Add Record.
  2. In Brevo, click Copy Brevo code host name next to the Host name field and paste it into the Host name field in Wix, or leave the field empty if instructed to do so.
  3. In Brevo, click Copy Brevo code value next to the Value field and paste it into the Value field in Wix.
    wix_brevo-code.jpg
  4. Leave the TTL field as is.
  5. Click Save.

Add the DKIM record

You will follow the same process for the DKIM record as you did for the Brevo code.

Different types of DKIM records may appear in your Brevo account:

  • DKIM 1 record and DKIM 2 record (CNAME type)
  • DKIM record (TXT type)

Select the tab that matches the DKIM records shown on your screen to view the correct instructions ⬇️:

DKIM 1 record and DKIM 2 record (CNAME type)DKIM record (TXT type)

Add two DKIM records of CNAME type:

DKIM 1 record

  1. Under CNAME (Aliases), click + Add Record.
  2. In Brevo, click Copy DKIM 1 record host name next to the Host name field and paste it into the Host name field in Wix.
  3. In Brevo, click Copy DKIM 1 record value next to the Value field and paste it into the Value field in Wix.
    wix_dkim-record.jpg
  4. Leave the TTL field as is.
  5. Click Save.

DKIM 2 record

  1. Under CNAME (Aliases), click + Add Record.
  2. In Brevo, click Copy DKIM 2 record host name next to the Host name field and paste it into the Host name field in Wix.
  3. In Brevo, click Copy DKIM 2 record value next to the Value field and paste it into the Value field in Wix.wix_dkim-record copy.jpg
  4. Leave the TTL field as is.
  5. Click Save.

Add the DMARC record

You will follow the same process for the DMARC record as you did for the Brevo code and DKIM record.

  1. Under TXT (Text), click + Add Record.
  2. In Brevo, click Copy DMARC record host name next to the Host name field and paste it into the Host name field in Wix.
  3. In Brevo, click Copy DMARC record value next to the Value field and paste it into the Value field in Wix.
    wix_dmarc-record.jpg
  4. Leave the TTL field as is.
  5. Click Save.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

Other
❗️ Important
The values provided below may vary depending on your specific domain provider. If you encounter issues while authenticating your domain, we suggest contacting your domain provider's support team for assistance to clarify the required format. If you're unsure what your domain provider is, check our dedicated article Identify your domain provider.

To authenticate your domain:

  1. Open a new tab in your web browser and log in to your domain provider account.
  2. Navigate to the page where you can view the DNS records for the domain you want to authenticate.

Add the Brevo code

  1. Create a new DNS record of TXT type.
  2. In Brevo, click Copy Brevo code name next to the Hostname field and paste it into the corresponding field of your domain provider.
    ❗️ Important

    If your domain provider does not support this value, try entering "@", your domain name, or leaving the field blank.

  3. In Brevo, click Copy Brevo code value next to the Data field and paste it into the corresponding field of your domain provider.
    authenticate_new_other_brevo-code_en-us.jpeg
  4. Save your DNS record.

Add the DKIM record

You will follow the same process for the DKIM record as you did for the Brevo code.

Different types of DKIM records may appear in your Brevo account:

  • DKIM 1 record and DKIM 2 record (CNAME type)
  • DKIM record (TXT type)

Select the tab that matches the DKIM records shown on your screen to view the correct instructions ⬇️:

DKIM 1 record and DKIM 2 record (CNAME type)DKIM record (TXT type)

Add two DKIM records of CNAME type:

DKIM 1 record

  1. Create a new DNS record of CNAME type.
  2. In Brevo, click Copy DKIM 1 record name next to the Name field and paste it into the corresponding field of your domain provider.
  3. In Brevo, click Copy DKIM 1 record value next to the Value field and paste it into the corresponding field of your domain provider.
    authenticate_new_other_dkim1_en-us.jpeg
  4. Save your DNS record.

DKIM 2 record

  1. Create a new DNS record of CNAME type.
  2. In Brevo, click Copy DKIM 2 record name next to the Name field and paste it into the corresponding field of your domain provider.
  3. In Brevo, click Copy DKIM 2 record value next to the Value field and paste it into the corresponding field of your domain provider.authenticate_new_other_dkim2_en-us.jpeg
  4. Save your DNS record.

Add the DMARC record

You will follow the same process for the DMARC record as you did for the Brevo code and DKIM record.

  1. Create a new DNS record of TXT type.
  2. In Brevo, click Copy DMARC record name next to the Hostname field and paste it into the corresponding field of your domain provider.
  3. In Brevo, click Copy DMARC record value next to the Data field and paste it into the corresponding field of your domain provider.
    authenticate_new_other_dmarc_en-us.jpeg
  4. Save your DNS record.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

Step 2: Verify if your domain is authenticated

❗️ Important
It can sometimes take up to 48 hours for DNS changes to propagate and for your domain to appear as authenticated in Brevo. This is normal, as DNS records need time to fully update across the internet.

After manually adding your DNS records, you can verify if your domain is authenticated.

  1. In Brevo, click Authenticate this email domain at the bottom of the page with the DNS records.
    authenticate_new_verify_en-us (1) (1) (1).jpeg
  2. Check your domain status:

    • ✅ Authenticated: Your domain is now authenticated, and you do not need to do anything else.
      auth_domain-status_en-us.png

    • ❌ Not authenticated: A pop-up will appear saying "The domain is not authenticated yet". You can repeat this process over the next 48 hours until your domain appears as Authenticated.

      💡 Good to know
      If your domain is still not authenticated after 48 hours, check our help article Troubleshooting issues with domain authentication or contact our support team for help.

FAQs - Domain authentication

Why do I see two CNAME records for DKIM instead of one TXT record?

Two CNAME records provide a more secure way to authenticate your domain. They delegate control to a trusted service, reducing the risk of tampering. Using two CNAME records also allows Brevo to rotate keys periodically without any action from you, improving email security.

How can I switch from one TXT record to two CNAME records for DKIM?

To switch to two CNAME records for DKIM, contact our support team by creating a ticket from your account.

I've authenticated my domain, but it still appears as "Not authenticated". What should I do?

It can sometimes take up to 48 hours for DNS changes to propagate and for your domain to appear as authenticated in Brevo. This is normal, as DNS records need time to fully update across the internet.

If it's been less than 48 hours since you authenticated your domain, we recommend you verify its status again:

  1. In Brevo, click the account dropdown and select Settings > Senders, Domains, IPs > Domains.
  2. Click Authenticate next to the domain you authenticated.
  3. Select Authenticate the domain yourself.
  4. Click Continue.
  5. Click Authenticate this email domain at the bottom of the page.
    authenticate_new_verify_faq_en-us.png

You can repeat this process over the next 48 hours until your domain appears as Authenticated. process a few times again during the next 48 hours.

If your domain still does not appear as authenticated after 48 hours, check our troubleshooting article Troubleshooting issues with domain authentication or contact our support team for help.

Which domain should I authenticate?

Authenticate the domain or subdomain you use to send emails through Brevo (the sender domain). For example, if your email is marketing@mycompany.com, your sender domain is mycompany.com. If you send from multiple domains, authenticate each one.

It says my DMARC record is missing a rua tag. What should I do?

To comply with Gmail, Yahoo, and Microsoft's requirements for email senders, your domain should have one DMARC record with a rua tag. If your domain already has a DMARC record but is missing a rua tag, you’ll need to update the existing record.

  1. Open a new tab in your web browser and log in to your domain provider account.
  2. Go to the DNS settings.
  3. Locate and edit your existing DMARC record.
  4. Add Brevo's rua tag at the end of the value: 
    ; rua=mailto:rua@dmarc.brevo.com

  5. Save your DMARC record.

Your DMARC record should now look like:

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com
❗️ Important
Your domain should have only one DMARC record. If you have multiple DMARC records, check our dedicated section in the article Troubleshooting issues with domain authentication (Brevo code, DKIM, DMARC).
Do I need to add an SPF or MX record to authenticate my domain?

The SPF and MX records are not required to authenticate a domain. We only provide these records when setting up a dedicated IP.

Can I use a 2048-bit key (sib2k) for my DKIM record of TXT type?
💡 Good to know
By default, DKIM records of CNAME type use a 2048-bit key.

By default, DKIM records of TXT type use a 1024-bit DKIM key. If you want to use a 2048-bit DKIM key to enhance your email security, contact our support team to activate it for your account. Your 2048-bit DKIM key will then appear in your DNS records with a value starting with sib2k.

1024-bit DKIM key (default) 2048-bit DKIM key
authenticate_troubleshooting_1024_en-us.png authenticate_troubleshooting_2048_en-us.png
❗️ Important

If you previously used the 1024-bit DKIM key to authenticate your domain, you'll need to update your existing DKIM record with the new value in your domain provider.

How to verify if my emails have been signed with DKIM?

Webmail services allow you to check if your email has been signed with your domain by reviewing your email headers and looking for the reference dkim=pass. If you need help finding your email headers, check our dedicated article How do I find email headers?.

email_header.jpg

In the above example from a Gmail email header, the reference dkim=pass confirms that the email is signed with the domain thegreenyoga.com.

Can I modify or delete the DNS records from my domain provider once it is authenticated?

To ensure your emails are correctly sent, keep the DNS records as they are in your domain provider as long as you are using Brevo to send emails. Modifying or deleting these DNS records may lead to email delivery problems or your emails being marked as spam.

⏭️ What's next?

🤔 Have a question?

If you have a question, feel free to contact our support team by creating a ticket from your account. If you don't have an account yet, you can contact us here.

If you’re looking for help with a project using Brevo, we can match you with the right certified Brevo Agency partner.

💬 Was this article helpful?

1179 out of 1962 found this helpful