This article is relevant for users who created a Brevo account after June 29th, 2023, and for users who have switched to the new domain authentication method. If you are still using the old domain authentication method, check our dedicated articles Authenticate your domain to improve the deliverability of your emails (DKIM) and Verify your domain to approve new senders automatically.

Authenticating your domain can increase the likelihood of your emails being delivered to recipients' inboxes, rather than ending up in the spam folder. It also proves that the emails you send through Brevo are legitimate and from your business, which allows you to maintain a good online reputation.

Good to know

Domain authentication is optional for sending emails using Brevo. However, we highly recommend authenticating your domain for the reasons explained in the below section What is domain authentication?.
You can only authenticate a domain you or your business own and control. This means that you cannot authenticate a free email address created with a public email service like Gmail, Yahoo, or AOL. To learn more about why you should avoid using a free email address, check our dedicated article Why you shouldn't send from a free email address.
Make sure you have access to your domain host account. If you're unsure what your domain host is, check our dedicated article Identify your domain host.
Gmail allows you to add a blue tick next to your sender name to help Gmail recipients identify you as a verified sender. To learn more, check Google’s help documentation on verified email.

🤔 What is domain authentication?

In simple terms, domain authentication is a way to verify your identity so that the recipient server knows that the person or organization sending the email is who they say they are. You add digital "signatures" to your emails by authenticating your domain, which work like a stamp of authenticity. This helps ensure that your emails are from a trusted source, keeping your recipients' inboxes safe from phishing or fraudulent messages.

Some advantages of domain authentication include:

🤝 Improving trust with ISPs and webmail services

When you authenticate your domain, ISPs (Internet Service Providers) and webmail services trust you more and your emails seem more trustworthy, resulting in improved email delivery and higher inbox placement rates.

Without proper domain authentication, mailbox providers such as Gmail or Yahoo may reject your emails. They could also subject them to further filtering, increasing the chances of delayed delivery, spam folder placement, or being blocked entirely.

✍️ Signing your emails with your domain name

By default, all emails sent through Brevo are digitally signed with the brevo.com domain name. However, if you want to add a personal touch to your emails and show that they come from your own business or website, you can authenticate your domain and use it as your email signature.

🔐 Authenticate your domain

Authenticating your domain may seem technical, but it mostly requires you to copy-paste some values from Brevo to your domain host (GoDaddy, IONOS, AWS, OVH, etc.). These values will be stored in DNS records on your domain host account.

Here is a recap of the steps we will guide you through to authenticate your domain:

account_authenticate_graphic_en-us

Step 1: Add your domain to your Brevo account

The first step to authenticating your domain is to add your domain to your Brevo account:

In Brevo, click the account dropdown > Senders, Domains, and Dedicated IPs > Domains.
Click Add a domain. If you've already added your domain to your Brevo account, click Authenticate below your domain name instead.
In the Enter your email domain field, enter the domain name you want to authenticate without http, https, or \. For example, if your domain is https://www.thegreenyoga.com, enter thegreenyoga.com.
In the Your email domain provider dropdown, select your domain host. If your domain host is not listed, select Other.
Click Save this email domain.

Step 2: Copy the values for the Brevo code and DKIM record

Once you have added your domain to your Brevo account, the values that you need to copy and add to your domain host are displayed:

✅ Brevo code	✍️ DKIM record
The Brevo code simplifies the validation process for new senders by eliminating the manual task of individually verifying each sender.	The DKIM protocol allows you to sign your emails with your domain, much like signing a letter with your signature. This ensures the recipient that the email is genuinely from you.

💡 Good to know

The ❌ Value mismatched message is only there because you haven’t completed the procedure yet. Once the configuration is complete, the ✅ Value matched message will appear next to the Brevo code and DKIM record.

🚀 Step 3: Add the values to your domain host

You now need to add these values (Brevo code and DKIM record) to your domain host outside of Brevo. The procedure will be slightly different depending on your domain host.

If you're unsure what your domain host is, check our article Identify your domain host. If you can't find your domain host in the list, select the Other dropdown at the bottom of the list.

GoDaddy

Open a new tab in your navigator and log into your GoDaddy account.
Click your account name and select My Products.
Under Your business, select the domain you want to authenticate.
In the sidebar menu, select Domains.
Next to the domain you want to authenticate, click Manage DNS.
To add the Brevo code:
1. Click Add New Record.
2. From the Type dropdown, select TXT.
3. From Brevo, copy the value from the Hostname field and paste it into the Name field of GoDaddy. This value is either:
  - @ if you are authenticating a domain.
  - Your subdomain prefix if you are authenticating a subdomain.
4. From Brevo, copy the value from the Data field and paste it into the Value field of GoDaddy.
5. Leave the TTL field as is.
6. Click Save.
To add the DKIM record:
1. Click Add New Record.
2. From the Type dropdown, select TXT.
3. From Brevo, copy the value from the Hostname field and paste it into the Name field of GoDaddy. This value is either:
  - mail._domainkey if you are authenticating a domain.
  - mail._domainkey. followed by your subdomain prefix if you are authenticating a subdomain.
4. From Brevo, copy the Data field and paste it into the Value field of GoDaddy.
5. Leave the TTL field as is.
6. Click Save.

IONOS

Open a new tab in your navigator and log into your IONOS account.
Go to Menu > Domaines & SSL.
Select the domain you want to authenticate.
Go to the DNS tab.
To add the Brevo code:
1. Click Add record.
2. Select TXT.
3. From Brevo, copy the value from the Hostname field and paste it into the Host Name field of IONOS. This value is either:
  - @ if you are authenticating a domain.
  - Your subdomain prefix if you are authenticating a subdomain.
4. From Brevo, copy the value from the Data field and paste it into the Value field of IONOS.
5. Leave the TTL field as is.
6. Click Save.
To add the DKIM record:
1. Click Add record.
2. Select TXT.
3. From Brevo, copy the value from the Hostname field and paste it into the Host Name field of IONOS. This value is either:
  - mail._domainkey if you are authenticating a domain.
  - mail._domainkey. followed by your subdomain prefix if you are authenticating a subdomain.
4. From Brevo, copy the Data field and paste it into the Value field of IONOS.
5. Leave the TTL field as is.
6. Click Save.

Amazon Web Services (AWS)

Open a new tab in your navigator and log into your AWS account.
Under Domains, click Registered domains.
Under Domain Name, select the domain you want to authenticate.
Click Manage DNS.
Under Domain name, select the domain name for the hosted zone version of the domain you want to authenticate.
To add the Brevo code:
1. Click Create record.
2. From Brevo, copy the value from the Hostname field and paste it into the Sub-domain field of AWS. This value is either:
  - Blank if you are authenticating a domain.
  - Your subdomain prefix if you are authenticating a subdomain.
3. From the Record type dropdown, select TXT.
4. From Brevo, copy the value from the Data field and paste it into the Value field of AWS.
5. Leave the TTL and Routing policy fields as is.
6. Click Create records.
To add the DKIM record:
1. Click Create record.
2. From Brevo, copy the value from the Hostname field and paste it into the Sub-domain field of AWS. This value is either:
  - mail._domainkey if you are authenticating a domain.
  - mail._domainkey. followed by your subdomain prefix if you are authenticating a subdomain.
3. From the Record type dropdown, select TXT.
4. From Brevo, copy the value from the Data field and paste it into the Value field of AWS.
5. Leave the TTL and Routing policy fields as is.
6. Click Create records.

OVH

Open a new tab in your navigator and log into your OVH account.
Select the domain you want to authenticate.
Go to the DNS zone tab.
To add the Brevo code:
1. Click Add an entry.
2. Select TXT.
3. From Brevo, copy the value from the Hostname field and paste it into the Sub-domain field of OVH. This value is either:
  - Blank if you are authenticating a domain.
  - Your subdomain prefix if you are authenticating a subdomain.
4. From Brevo, copy the value from the Data field and paste it into the Value field of OVH.
5. Leave the TTL field as is.
6. Click Next.
7. Verify your information and click Confirm.
To add the DKIM record:
1. Click Add an entry.
2. Select TXT.
3. From Brevo, copy the value from the Hostname field and paste it into the Sub-domain field of OVH. This value is either:
  - mail._domainkey if you are authenticating a domain.
  - mail._domainkey. followed by your subdomain prefix if you are authenticating a subdomain.
4. From Brevo, copy the Data field and paste it into the Value field of OVH.
5. Leave the TTL field as is.
6. Click Next.
7. Verify your information and click Confirm.

Google Domains

❗️ Important

Google Domains doesn't allow adding a record with the same type and name twice. If you have to add an extra record with the same type and name as another, add it below the first one by clicking + Add more to this record and pasting the data in the new field.

Open a new tab in your navigator and log into your Google Domains account.
Click Manage next to the domain you want to authenticate.
In the sidebar menu, select DNS.
Under Resource records, open the Custom records dropdown and click Manage custom records.
To add the Brevo code:
1. Click Create new record.
2. From Brevo, copy the value from the Hostname field and paste it into the Host name field of Google Domains. This value is either:
  - @ if you are authenticating a domain.
  - Your subdomain prefix if you are authenticating a subdomain.
3. From the Type dropdown, select TXT.
4. From Brevo, copy the value from the Data field and paste it into the Data field of Google Domains.
5. Leave the TTL field as is.
6. Click Save.
To add the DKIM record:
1. Click Create new record.
2. From Brevo, copy the value from the Hostname field and paste it into the Host name field of Google Domains. This value is either:
  1. mail._domainkey if you are authenticating a domain.
  2. mail._domainkey. followed by your subdomain prefix if you are authenticating a subdomain.
3. From the Type dropdown, select TXT.
4. From Brevo, copy the Data field and paste it into the Data field of Google Domains.
5. Leave the TTL field as is.
6. Click Save.

Gandi

Open a new tab in your navigator and log into your Gandi account.
In the sidebar menu, select Domain.
Select the domain you want to authenticate.
Go to the DNS Records tab.
To add the Brevo code:
1. Click Add record.
2. From the Type dropdown, select TXT.
3. From Brevo, copy the value from the Hostname field and paste it into the Name field of Gandi. This value is either:
  - @ if you are authenticating a domain.
  - Your subdomain prefix if you are authenticating a subdomain.
4. From Brevo, copy the value from the Data field and paste it into the Text value field of Gandi.
5. Leave the TTL and Unit fields as is.
6. Click Save.
Add the DKIM record:
1. Click Add record.
2. From the Type dropdown, select TXT.
3. From Brevo, copy the value from the Hostname field and paste it into the Name field of Gandi. This value is either:
  - mail._domainkey if you are authenticating a domain.
  - mail._domainkey. followed by your subdomain prefix if you are authenticating a subdomain.
4. From Brevo, copy the Data field and paste it into the Text value field of Gandi.
5. Leave the TTL and Unit fields as is.
6. Click Save.

Amen

Open a new tab in your navigator and log into your Amen account.
Under Domaines, select the domain you want to authenticate.
Select Domaines et DNS.
Select Configuration DNS.
Go to the Gestion avancée tab.
To add the Brevo code:
1. Click Ajouter un enregistrement.
2. From Brevo, copy the value from the Hostname field and paste it into the Nom field of Amen. This value is either:
  - @ if you are authenticating a domain.
  - Your subdomain prefix if you are authenticating a subdomain.
3. Select TXT.
4. From Brevo, copy the value from the Data field and paste it into the Valeur field of Amen.
5. Leave the TTL field as is.
6. Click Valider.
Add the DKIM record:
1. Click Ajouter un enregistrement.
2. From Brevo, copy the value from the Hostname field and paste it into the Nom field of Amen. This value is either:
  - mail._domainkey if you are authenticating a domain.
  - mail._domainkey. followed by your subdomain prefix if you are authenticating a subdomain.
3. Select TXT.
4. From Brevo, copy the Data field and paste it into the Valeur field of Amen.
5. Leave the TTL field as is.
6. Click Valider.

Other

❗️ Important

The values given below might differ based on your domain host. If you are encountering issues while authenticating your domain, we recommend you reach out to your domain host support to clarify the format to be used.

Open a new tab in your navigator and log into your domain host account.
Navigate to the DNS records of the domain you want to authenticate.
To add the Brevo code:
1. Create a DNS record of TXT type.
2. From Brevo, copy the value from the Hostname field and paste it into the corresponding field of your domain host. This value is either:
  - @, your domain name, or blank if you are authenticating a domain.
  - Your subdomain prefix if you are authenticating a subdomain.
3. From Brevo, copy the value from the Data field and paste it into the corresponding field of your domain host.
4. Leave the TTL field as is.
5. Save your DNS record.
To add the DKIM record:
1. Create a DNS record of TXT type.
2. From Brevo, copy the value from the Hostname field and paste it into the corresponding field of your domain host. This value is either:
  - mail._domainkey if you are authenticating a domain.
  - mail._domainkey. followed by your subdomain prefix if you are authenticating a subdomain.
3. From Brevo, copy the Data field and paste it into the corresponding field of your domain host.
4. Leave the TTL field as is.
5. Save your DNS record.

Step 4: Verify if your domain was successfully authenticated

Once you have added and saved the values in your domain host, it can take up to 48 hours for the changes to propagate fully.

During that time, you can verify if your domain was successfully authenticated:

In Brevo, click the account dropdown > Senders, Domains, and Dedicated IPs > Domains.
Select the domain you authenticated.
Below the values, click Authenticate this email domain.

Once your domain has been successfully authenticated, the ✅ Value matched message will appear next to the Brevo code and DKIM record:

That's it! Your domain has been successfully authenticated, and your emails will now be signed with your domain name in your recipients' inboxes.

❓ FAQs

🧐 Do I need to add an SPF or MX record to authenticate my domain?

The SPF and MX records are not required to authenticate a domain. We only provide these records when setting up a dedicated IP.

🔑 Can I use a 2048-bit DKIM key?

The default DKIM key generated when adding your domain is a standard 1024-bit DKIM key. If you want to use a 2048-bit DKIM key to enhance your email security, ask our support team to activate it for your account. Your 2048-bit DKIM key will then appear in your generated DNS records for email authentication with a Hostname starting with sib2k:

💡 Good to know

The 2048-bit DKIM key is only available to users with a paid plan.

👬 My domain host doesn't allow adding DNS records with the same type and name twice. What should I do?

Some domain hosts, such as Google Domains, do not allow adding a record with the same type and name twice. If you have to add an extra record with the same type and name as another, you should add it below the first DNS record.

Here are two examples of how to do it in Google Domains and in Amazon Web Services (AWS):

Google Domains
Click + Add more to this record below the first DNS record and paste the data of the extra record in the new field.
Amazon Web Services (AWS)
Enter the value of the extra record on a separate line below the first DNS record.

❌ What to do when a field in my domain host turns red or throws an error when I enter a value?

If a field in your domain host turns red or throws an error when entering a value, it usually indicates that an incorrect value has been entered. We recommend double-checking that the entered value matches what is displayed in your Brevo account.

Additionally, if you use a 2048-bit DKIM key, make sure that the Hostname value you enter starts with sib2k instead of mail.

⏳ My domain still hasn't been authenticated after 48 hours. What should I do?

If your domain still hasn't been authenticated after 48 hours, contact our support team and include a screenshot of the DNS records you have added to your domain host.

For domain host-specific requirements, we recommend you reach out to your domain host support.

🔎 How to verify if my emails have been signed?

Webmail services allow you to check if your email has been signed with your domain by reviewing your email headers and looking for the reference dkim=pass. If you need help finding your email headers, check our dedicated article How do I find email headers?.

In the above example from a Gmail email header, the reference dkim=pass confirms that the email is signed with the domain thegreenyoga.com.

🗑️ Can I delete these DNS records from my domain host once my domain has been authenticated?

To ensure your emails are correctly sent, keep these two DNS records in your domain host as long as you are using Brevo to send emails. Deleting these DNS records may lead to email delivery problems or your emails being marked as spam.

🤔 Have a question?

If you have a question, feel free to contact our support team by creating a ticket from your account. If you don't have an account yet, you can contact us here.

💬 Was this article helpful?

199 out of 299 found this helpful