Search

Authenticate your domain with Brevo (Brevo code, DKIM, DMARC)

❗️ Important
Since February 1, 2024, domain authentication is mandatory as part of Gmail and Yahoo's requirements for email senders. On May 5, 2025, Microsoft announced it would adopt similar standards. To learn more, check our dedicated article Comply with Gmail, Yahoo, and Microsoft's requirements for email senders.

In this article, you’ll learn how to authenticate your domain. You can do it automatically, manually, or by asking someone else to do it for you, such as your company’s IT specialist or your domain provider’s support team.

Before you start

  • If you're not familiar with domain authentication, we recommend starting with our help article FAQs - About domain authentication (Brevo code, DKIM, DMARC). In this article, you'll find a glossary of common terms, an explanation of what domain authentication is, why it’s important, and information about the DNS records used.
  • You can only authenticate a domain that you or your business owns and controls. Domains from free email services like Gmail and Yahoo cannot be authenticated (e.g., @gmail.com or @yahoo.com). If you don't have your own domain yet, you'll need to purchase one. To learn more, check our dedicated article Why you need to replace your free email address with a professional one.

Step 1. Add your domain to Brevo

First, add the domain you use to send emails from Brevo to the Domains page. 

  1. In Brevo, click the account dropdown and select Senders, Domains, and Dedicated IPs.
  2. Go to the Domains page.
  3. Click Add a domain. If your domain already appears on the page, click Authenticate next to it instead.
    authencate_new_add-domain_en-us.jpeg

  4. Enter the name of your domain. This is typically the part of your email address that comes after the "@" symbol. For example, if your email address is marketing@mycompany.com, the domain you need to add is mycompany.com.

    authenticate_new_domain-name_en-us.jpeg
  5. Click Add domain.

Step 2. Authenticate your domain

Several options are available to authenticate your domain:

  1. 🤖 Authenticate the domain automatically (only available for supported domain providers) 
    Quickly authenticate your domain in under two minutes by logging in to your domain provider’s account directly from Brevo. All required DNS records will be added automatically—no copying and pasting needed.
  2. ✍️ Authenticate the domain yourself
    Manually copy and paste each DNS record from Brevo to your domain's settings.
  3. 🤝 Ask someone else to authenticate the domain for you
    Ask someone else, such as your company’s IT specialist or your domain provider's support team, to authenticate the domain for you by email.

Option 1: 🤖 Authenticate the domain automatically

💡 Good to know
This option is only available for supported domain providers. If it's not available and you're not familiar with domain authentication, you can ask someone else, such as your company's IT specialist or your domain provider’s support team, to authenticate the domain for you by email.

When you choose the Authenticate the domain automatically option, Brevo uses Entri, our domain authentication partner, to complete the process in under two minutes. All you need to do is log in to your domain provider’s account directly from Brevo.

📹 You can watch this short video to see how it works:

  1. Select the Authenticate the domain automatically option.
  2. Click Continue. A pop-up window appears.
  3. Click Continue. Brevo will automatically detect your domain provider.
  4. Enter the credentials of your domain provider's account. If you're unsure what your domain provider is, check our dedicated article Identify your domain provider.
  5. Click Continue. All required DNS records will be added automatically to your domain's settings.
  6. (Optional) If your domain already has a DMARC record, you'll be asked if you want to replace it with Brevo's DMARC record. Click Okay, then continue to replace it.
    ❗️ Important
    If you don't want to replace your existing DMARC record with Brevo's, you need to authenticate the domain yourself instead.
  7. All required DNS records have been added to your domain's settings. From the confirmation page, click Back to domain listing.

  8. Check if your domain is authenticated:

    • ✅ If your domain appears as Authenticated, you’re all set!
      auth_domain-status_en-us.png

    • ❌ If your domain appears as Not authenticated, try again later by clicking View configuration next to the status, then selecting Authenticate this email domain at the bottom of the page. Note that full authentication can take up to 48 hours.

      💡 Good to know
      If your domain is still not authenticated after 48 hours, check our help article Troubleshooting issues with domain authentication or contact our support team for help.

Option 2: ✍️ Authenticate the domain yourself

When you choose the Authenticate the domain yourself option, you'll need to copy and paste some values, called DNS records, from Brevo to your domain provider account. Depending on when your Brevo account was created, you may need to add three or four records.

  • The records you'll see in your Brevo account if you need to add four records:
    DNS_4_records_horiz_en-us.png
  • The records you'll see in your Brevo account if you need to add three records:
    DNS_records_horiz_EN-US.png

The table below outlines the DNS records used to authenticate a domain in Brevo and their respective purposes:

Name Type Purpose
Brevo code TXT Verifies that you own and control your sending domain
DKIM record 1 TXT or 2 CNAME Signs and secures your emails with a digital signature (DKIM) to make sure they aren't modified after you send them
DMARC record TXT Tells mail servers what to do if an email looks suspicious based on the DMARC policy you've chosen (either none, quarantine, or reject)

Step 1: Add the Brevo code, DKIM, and DMARC to your domain settings

💡 Good to know
Some steps of this process take place outside of Brevo, directly within your domain provider's account.

Depending on your domain provider, the steps and information required to add the DNS records (Brevo code, DKIM, and DMARC) to your domain's settings may vary.

Use the dropdowns below to find step-by-step instructions based on the domain provider you use. If your domain provider isn’t listed, you can choose a generic set of steps in the Other dropdown to guide you ⬇️.

Amazon Route 53
❗️ Important
Amazon Route 53 doesn't allow adding a record with the same type and name twice. If you have to add an extra record with the same type and name as another, enter the value of the extra record on a separate line below the first record.

To authenticate your domain in Amazon Route 53:

  1. Open a new tab in your web browser and log in to your Amazon Web Services account.
  2. Open the Route 53 console.
  3. In the left-side panel, select Hosted zones. This is where you'll add your DNS records.
    aws_access-domain.jpg

  4. Select the domain you want to authenticate.

Add the Brevo code

  1. In Amazon Route 53, click Create record.
  2. In Brevo, click Copy Brevo code name next to the Record name field and paste it into the Record name field in Amazon Route 53, or leave the field empty if instructed to do so.
  3. In Amazon Route 53, select TXT from the Record type dropdown.
  4. In Brevo, click Copy Brevo code value from the Value field and paste it into the Value field in Amazon Route 53.
    aws_brevo-code.jpeg
  5. In Amazon Route 53, leave the TTL and Routing policy fields as is.

  6. In Amazon Route 53, click Create record.

Add the DKIM record

You’ll follow the same process for the DKIM record.

Depending on when your Brevo account was created, you may need to add either two DKIM records of CNAME type or one DKIM record of TXT type. To view the right instructions, select the tab below the table that matches the type of DKIM records shown on your screen:

Two DKIM records of CNAME type One DKIM record of TXT type
authenticate_2-dkim-cname_en-us.png authenticate_1-dkim-txt_en-us.png
Two DKIM records of CNAME type One DKIM record of TXT type

Add two DKIM records of CNAME type:

DKIM 1 record

  1. In Amazon Route 53, click Create record.
  2. In Brevo, click Copy DKIM 1 record name next to the Record name field and paste it into the Record name field in Amazon Route 53.
  3. In Amazon Route 53, select CNAME from the Record type dropdown.
  4. In Brevo, click Copy DKIM record value next to the Value field and paste it into the Value field in Amazon Route 53.
    aws_dkim-record (1).jpeg

  5. In Amazon Route 53, leave the TTL and Routing policy fields as they are.

  6. In Amazon Route 53, click Create record.

DKIM 2 record

  1. In Amazon Route 53, click Create record.
  2. In Brevo, click Copy DKIM 2 record name next to the Record name field and paste it into the Record name field in Amazon Route 53.
  3. In Amazon Route 53, select CNAME from the Record type dropdown.
  4. In Brevo, copy Copy DKIM 2 record value next to the Value field and paste it into the Value field in Amazon Route 53.
    aws_dkim2-record_en-us copy.jpeg

  5. In Amazon Route 53, leave the TTL and Routing policy fields as they are.

  6. In Amazon Route 53, click Create record.

Add the DMARC record

You'll follow the same process for the DMARC record:

  1. In Amazon Route 53, click Create record.
  2. In Brevo, click Copy DMARC record name next to the Record name field and paste it into the Record name field in Amazon Route 53.
  3. In Amazon Route 53, select TXT from the Record type dropdown.
  4. In Brevo, click Copy DMARC record value next to the Value field and paste it into the Value field in Amazon Route 53.
    aws_dmarc-record (1).jpg

  5. In Amazon Route 53, leave the TTL and Routing policy fields as is.

  6. In Amazon Route 53, click Create record.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

Amen

To authenticate your domain in Amen:

  1. Open a new tab in your web browser and log in to your Amen account.
  2. Under Domaines (Domain), select the domain you want to authenticate.
    amen_domaines.png
  3. Select Domaines et DNS (Domains and DNS).
    amen_domaines_dns.png
  4. Select Configuration DNS (DNS configuration).
    amen_dns_config.png
  5. Go to the Gestion avancée (Advanced management) tab. This is where you'll add your DNS records.
    amen_advanced.png

Add the Brevo code

  1. In Amen, click Ajouter un enregistrement (Add a record).
  2. In Brevo, click Copy Brevo code name next to the Name field and paste it into the Nom (Name) field in Amen.
  3. In Amen, select TXT.
  4. In Brevo, click Copy Brevo code value from the Value field and paste it into the Valeur (Value) field in Amen.
    amen_brevo-code.jpg
  5. In Amen, leave the Type/Valeur par défaut (Type/Default value) field as is.
  6. In Amen, click Valider (Confirm).

Add the DKIM record

You’ll follow the same process for the DKIM record.

Depending on when your Brevo account was created, you may need to add either two DKIM records of CNAME type or one DKIM record of TXT type. To view the right instructions, select the tab below the table that matches the type of DKIM records shown on your screen:

Two DKIM records of CNAME type One DKIM record of TXT type
authenticate_2-dkim-cname_en-us.png authenticate_1-dkim-txt_en-us.png
Two DKIM records of CNAME type One DKIM record of TXT type

Add two DKIM records of CNAME type:

DKIM 1 record

  1. In Amen, click Ajouter un enregistrement (Add a record).
  2. In Brevo, click Copy DKIM 1 record name next to the Name field and paste it into the Nom (Name) field in Amen.
  3. In Amen, select CNAME.
  4. In Brevo, click Copy DKIM 1 record value next to the Value field and paste it into the Valeur (Value) field in Amen.
    amen_dkim-record.jpg
  5. In Amen, leave the Type/Valeur par défaut (Type/Default value) field as is.
  6. In Amen, click Valider (Confirm).

DKIM 2 record

  1. In Amen, click Ajouter un enregistrement (Add a record).
  2. In Brevo, click Copy DKIM 2 record name next to the Name field and paste it into the Nom (Name) field in Amen.
  3. In Amen, select CNAME.
  4. In Brevo, click Copy DKIM 2 record value next to the Value field and paste it into the Valeur (Value) field in Amen.
    amen_dkim2-record.jpeg
  5. In Amen, leave the Type/Valeur par défaut (Type/Default value) field as is.
  6. In Amen, click Valider (Confirm).

Add the DMARC record

You'll follow the same process for the DMARC record:

  1. In Amen, click Ajouter un enregistrement (Add a record).
  2. In Brevo, click Copy the DMARC record name next to the Name field and paste it into the Nom (Name) field in Amen.
  3. In Amen, select TXT.
  4. In Brevo, click Copy the DMARC record value next to the Value field and paste it into the Valeur (Value) field in Amen.
    amen_dmarc-record.jpg
  5. In Amen, leave the Type/Valeur par défaut (Type/Default value) field as is.
  6. In Amen, click Valider (Confirm).

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

Bluehost

To authenticate your domain in Bluehost:

  1. Open a new tab in your web browser and log in to your Bluehost account.
  2. In the left-side panel, click Domains.
  3. At the bottom of the page, open the Advanced Tools dropdown.
  4. Next to Advanced DNS Records, click Manage. This is where you'll add your DNS records.
    bluehost_access.jpg
  5. (Optional) If a warning message is shown, click Continue.

Add the Brevo code

  1. In Bluehost, click + Add Record.
  2. In Bluehost, click TXT from the Type dropdown.

  3. In Brevo, locate the value in the Host Record field and select the same value from the Refers to dropdown in Bluehost. If the value isn't listed, select Other Hosts. Then, in Brevo, click Copy Brevo code host record and paste it into the Host Name field in Bluehost.

  4. In Brevo, click Copy Brevo code TXT value next to the TXT value field and paste it into the TXT value field in Bluehost.
  5. In Bluehost, select 1 Hour from the TTL dropdown.
    bluehost_brevo-code.jpeg
  6. In Bluehost, click Add.

Add the DKIM record

You’ll follow the same process for the DKIM record.

Depending on when your Brevo account was created, you may need to add either two DKIM records of CNAME type or one DKIM record of TXT type. To view the right instructions, select the tab below the table that matches the type of DKIM records shown on your screen:

Two DKIM records of CNAME type One DKIM record of TXT type
authenticate_2-dkim-cname_en-us.png authenticate_1-dkim-txt_en-us.png
Two DKIM records of CNAME type One DKIM record of TXT type

Add two DKIM records of CNAME type:

DKIM 1 record

  1. In Bluehost, click + Add Record.
  2. In Bluehost, select CNAME from the Type dropdown.
  3. In Bluehost, select Other Host from the Refers to dropdown.
  4. In Brevo, click Copy DKIM 1 record host record next to the Host Record field and paste it into the Host Name field in Bluehost.
  5. In Brevo, click Copy DKIM 1 record TXT value next to the TXT Value field and paste it into the Alias to field in Bluehost.
  6. In Bluehost, select 1 Hour from the TTL dropdown.
    bluehost_dkim-record.jpg
  7. In Bluehost, click Add.

DKIM 2 record

  1. In Bluehost, click + Add Record.
  2. In Bluehost, select CNAME from the Type dropdown.
  3. In Bluehost, select Other Host from the Refers to dropdown.
  4. In Brevo, click Copy DKIM 2 record host record next to the Host Record field and paste it into the Host Name field in Bluehost.
  5. In Brevo, click Copy DKIM 2 record TXT value next to the TXT Value field and paste it into the Alias to field in Bluehost.
  6. In Bluehost, select 1 Hour from the TTL dropdown.
    bluehost_dkim-record copy.jpg
  7. In Bluehost, click Add.

Add the DMARC record

You'll follow the same process for the DMARC record:

  1. Click + Add Record.
  2. From the Type dropdown, select TXT.
  3. From the Refers to dropdown, select Other Host.
  4. In Brevo, click Copy DMARC record host record next to the Host Record field and paste it into the Host Name field in Bluehost.
  5. In Brevo, click Copy DMARC record TXT value next to the TXT value field and paste it into the TXT value field in Bluehost.
  6. From the TTL dropdown, select 1 Hour.
    bluehost_dmarc-record.jpg
  7. Click Add.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

Cloudflare

To authenticate your domain in Cloudflare:

  1. Open a new tab in your web browser and log in to your Cloudflare account.
  2. From your account home page, select the domain you want to authenticate.
  3. In the left-side panel, click DNS > Records. This is where you'll add your DNS records.
    cloudfare_dns-records_en-us.png

Add the Brevo code

  1. In Cloudflare, click Add record.
    cloudfare_add-record_en-us.png
  2. In Cloudflare, select TXT from the Type dropdown.
  3. In Brevo, click Copy Brevo code name next to the Name field and paste it into the Name field in Cloudflare.
  4. In Cloudflare, leave the TTL field as is.
  5. In Brevo, click Copy Brevo code content next to the Content field and paste it into the Content field in Cloudflare.
    cloudfare_brevo-code_en-us.png
  6. In Cloudfare, click Save.

Add the DKIM record

You’ll follow the same process for the DKIM record.

Depending on when your Brevo account was created, you may need to add either two DKIM records of CNAME type or one DKIM record of TXT type. To view the right instructions, select the tab below the table that matches the type of DKIM records shown on your screen:

Two DKIM records of CNAME type One DKIM record of TXT type
authenticate_2-dkim-cname_en-us.png authenticate_1-dkim-txt_en-us.png
Two DKIM records of CNAME type One DKIM record of TXT type

Add two DKIM records of CNAME type:

DKIM 1 record

  1. Click Add record.
  2. In Cloudflare, select CNAME from the Type dropdown.
  3. In Brevo, click Copy DKIM record 1 name next to the Name field and paste it into the Name field in Cloudflare.
  4. In Brevo, click Copy DKIM record 1 content next to the Content field and paste it into the Target field in Cloudflare.
  5. In Cloudflare, deactivate the Proxy status toggle.
    cloudfare_dkim_cname1_en-us.png
  6. Click Save.

DKIM 2 record

  1. Click Add record.
  2. In Cloudflare, select CNAME from the Type dropdown.
  3. In Brevo, click Copy DKIM record 2 name next to the Name field and paste it into the Name field in Cloudflare.
  4. In Brevo, click Copy DKIM record 2 content next to the Content field and paste it into the Target field in Cloudflare.
  5. In Cloudflare, deactivate the Proxy status toggle.cloudfare_dkim_cname2_en-us.png
  6. Click Save.

Add the DMARC record

You'll follow the same process for the DMARC record:

  1. In Cloudflare, click Add record.
  2. In Cloudflare, select TXT from the Type dropdown.
  3. In Brevo, click Copy DMARC record name next to the Name field and paste it into the Name field in Cloudflare.
  4. In Cloudflare, leave the TTL field as is.
  5. In Brevo, click Copy DMARC record content next to the Content field and paste it into the Content field in Cloudflare.
    cloudfare_dmarc_en-us.png
  6. In Cloudflare, click Save.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

Gandi

To authenticate your domain in Gandi:

  1. Open a new tab in your web browser and log in to your Gandi account.
  2. In the left-side panel, select Domain.
    gandi_domain.png
  3. Select the domain you want to authenticate.
  4. Go to the DNS Records tab. This is where you'll add your DNS records.
    gandi_dns_records.jpg

Add the Brevo code

  1. In Gandi, click Add record.
  2. In Gandi, select TXT from the Type dropdown.
  3. In Gandi, leave the TTL and Unit fields as they are.
  4. In Brevo, click Copy Brevo code name next to the Name field and paste it into the Name field in Gandi.
  5. In Brevo, click Copy Brevo code text value next to the Text value field and paste it into the Text value field in Gandi.
    gandi_brevo-code.jpg
  6. In Gandi, click Save.

Add the DKIM record

You’ll follow the same process for the DKIM record.

Depending on when your Brevo account was created, you may need to add either two DKIM records of CNAME type or one DKIM record of TXT type. To view the right instructions, select the tab below the table that matches the type of DKIM records shown on your screen:

Two DKIM records of CNAME type One DKIM record of TXT type
authenticate_2-dkim-cname_en-us.png authenticate_1-dkim-txt_en-us.png
Two DKIM records of CNAME type One DKIM record of TXT type

Add two DKIM records of CNAME type:

DKIM 1 record

  1. Click Add record.
  2. From the Type dropdown, select CNAME.
  3. Leave the TTL and Unit fields as they are.
  4. In Brevo, click Copy DKIM record 1 name next to the Name field and paste it into the Name field in Gandi.
  5. In Brevo, click Copy DKIM record 1 text value next to the Text value field and paste it into the Hostname field in Gandi.
    gandi_dkim-record (1).jpg
  6. Click Save.

DKIM 2 record

  1. Click Add record.
  2. From the Type dropdown, select CNAME.
  3. Leave the TTL and Unit fields as they are.
  4. In Brevo, click Copy DKIM record 2 name next to the Name field and paste it into the Name field in Gandi.
  5. In Brevo, click Copy DKIM record 2 text value next to the Text value field and paste it into the Hostname field in Gandi.
  6. gandi_dkim-record2.jpeg
  7. Click Save.

Add the DMARC record

You'll follow the same process for the DMARC record:

  1. Click Add record.
  2. From the Type dropdown, select TXT.
  3. Leave the TTL and Unit fields as they are.
  4. In Brevo, click Copy DMARC record name next to the Name field and paste it into the Name field in Gandi.
  5. In Brevo, click Copy DMARC record text value next to the Text value field and paste it into the Text value field in Gandi.
    gandi_dmarc.jpg
  6. Click Save.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

GoDaddy

To authenticate your domain in GoDaddy:

  1. Open a new tab in your web browser and log in to your GoDaddy account. 
  2. Under All Products and Services, click DNS next to the domain you want to authenticate. This is where you'll add your DNS records.
    godaddy_access.jpg

Add the Brevo code

  1. In GoDaddy, click Add More Records.
  2. In GoDaddy, select TXT from the Type dropdown.
  3. In Brevo, click Copy Brevo code name next to the Name field and paste it into the Name field in GoDaddy.
  4. In Brevo, click Copy Brevo code value next to the Value field and paste it into the Value field in GoDaddy.
    godaddy_brevo-code.jpg
  5. In GoDaddy, leave the TTL field as is.
  6. In GoDaddy, click Save.

Add the DKIM record

You’ll follow the same process for the DKIM record.

Depending on when your Brevo account was created, you may need to add either two DKIM records of CNAME type or one DKIM record of TXT type. To view the right instructions, select the tab below the table that matches the type of DKIM records shown on your screen:

Two DKIM records of CNAME type One DKIM record of TXT type
authenticate_2-dkim-cname_en-us.png authenticate_1-dkim-txt_en-us.png
Two DKIM records of CNAME type One DKIM record of TXT type

Add two DKIM records of CNAME type:

DKIM 1 record

  1. In GoDaddy, click Add New Record.
  2. In GoDaddy, select CNAME from the Type dropdown.
  3. In Brevo, click Copy DKIM 1 record name next to the Name field and paste it into the Name field in GoDaddy.
  4. In Brevo, click Copy DKIM 1 record value next to the Value field and paste it into the Value field in GoDaddy.
    godaddy_dkim-record.jpg
  5. In GoDaddy, leave the TTL field as is.
  6. In GoDaddy, click Save.

DKIM 2 record

  1. In GoDaddy, click Add New Record.
  2. In GoDaddy, select CNAME from the Type dropdown.
  3. In Brevo, click Copy DKIM 2 record name next to the Name field and paste it into the Name field in GoDaddy.
  4. In Brevo, click Copy DKIM 2 record value next to the Value field and paste it into the Value field in GoDaddy.godaddy_dkim-record2.jpeg
  5. In GoDaddy, leave the TTL field as is.
  6. In GoDaddy, click Save.

Add the DMARC record

You'll follow the same process for the DMARC record:

  1. In GoDaddy, click Add New Record.
  2. In GoDaddy, select TXT from the Type dropdown.
  3. In Brevo, click Copy DMARC record name next to the Name field and paste it into the Name field in GoDaddy.
  4. In Brevo, click Copy DMARC record value next to the Value field and paste it into the Value field in GoDaddy.
    godaddy_dmarc-record.jpg
  5. In GoDaddy, leave the TTL field as is.
  6. In GoDaddy, click Save.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

Google Domains
❗️ Important
Google Domains doesn't allow adding a record with the same type and name twice. If you have to add an extra record with the same type and name as another, add it below the first one by clicking + Add more to this record and pasting the data in the new field.

To authenticate your domain in Google Domains:

  1. Open a new tab in your web browser and log in to your Google Domains account.
  2. Click Manage next to the domain you want to authenticate.
  3. In the sidebar menu, select DNS.
  4. Go to the Custom resource records section at the bottom of the page. This is where you'll add your DNS records.

Add the Brevo code

  1. In Brevo, click Copy Brevo code hostname next to the Host name field and paste it into the Name field in Google Domains.
  2. In Google Domains, select TXT from the Type dropdown.
  3. In Google Domains, leave the TTL field as is.
  4. In Brevo, click Copy Brevo code data next to the Data field and paste it into the Data field in Google Domains.
    google-domains_brevo-code (1).jpg
  5. In Google Domains, click Add.

Add the DKIM record

You'll follow the same process for the DKIM record.

Depending on when your Brevo account was created, you may need to add either two DKIM records of CNAME type or one DKIM record of TXT type. To view the right instructions, select the tab below the table that matches the type of DKIM records shown on your screen:

Two DKIM records of CNAME type One DKIM record of TXT type
authenticate_2-dkim-cname_en-us.png authenticate_1-dkim-txt_en-us.png
Two DKIM records of CNAME type  One DKIM record of TXT type 

Add two DKIM records of CNAME type:

DKIM 1 record

  1. In Brevo, click Copy DKIM 1 record hostname next to the Host name field and paste it into the Host name field in Google Domains.
  2. In Google Domains, select CNAME from the Type dropdown.
  3. In Google Domains, leave the TTL field as is.
  4. In Brevo, click Copy DKIM 1 record data next to the Data field and paste it into the Data field in Google Domains.
    google-domains_dkim-record (1).jpg
  5. In Google Domains, click Save.

DKIM 2 record

  1. In Brevo, click Copy DKIM 2 record hostname next to the Host name field and paste it into the Host name field in Google Domains.
  2. In Google Domains, select CNAME from the Type dropdown.
  3. In Google Domains, leave the TTL field as is.
  4. In Brevo, click Copy DKIM 2 record data next to the Data field and paste it into the Data field in Google Domains.google-domains_dkim-record2.jpeg
  5. In Google Domains, click Save.

Add the DMARC record

You'll follow the same process for the DMARC record:

  1. In Brevo, click Copy DMARC record hostname next to the Host name field and paste it into the Host name field in Google Domains.
  2. In Google Domains, select TXT from the Type dropdown.
  3. In Google Domains, leave the TTL field as is.
  4. In Brevo, click Copy DMARC record data next to the Data field and paste it into the Data field in Google Domains.
    google-domains_dmarc-record (1).jpg
  5. In Google Domains, click Save.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

Hostinger

To authenticate your domain in Hostinger:

  1. Open a new tab in your web browser and log in to your Hostinger account.
  2. Under Domain, click Manage next to the domain you want to authenticate.
    hostinger_access1.jpg
  3. In the left-side panel, click DNS/Nameservers. This is where you'll add your DNS records.
    hostinger_access2.jpg

Add the Brevo code

  1. In Hostinger, under Manage DNS records, select TXT from the Type dropdown.
  2. In Brevo, click Copy Brevo code name next to the Name field and paste it into the Name field in Hostinger.
  3. In Brevo, click Copy Brevo code TXT value next to the TXT value field and paste it into the TXT value field in Hostinger.
    hostinger_brevo-code (1).jpg
  4. In Hostinger, leave the TTL field as is.
  5. In Hostinger, click Add Record.

Add the DKIM record

You'll follow the same process for the DKIM record.

Depending on when your Brevo account was created, you may need to add either two DKIM records of CNAME type or one DKIM record of TXT type. To view the right instructions, select the tab below the table that matches the type of DKIM records shown on your screen:

Two DKIM records of CNAME type One DKIM record of TXT type
authenticate_2-dkim-cname_en-us.png authenticate_1-dkim-txt_en-us.png
 Two DKIM records of CNAME type  One DKIM record of TXT type

Add two DKIM records of CNAME type:

DKIM 1 record

  1. In Hostinger, under Manage DNS records, select CNAME from the Type dropdown.
  2. In Brevo, click Copy DKIM 1 record name next to the Name field and paste it into the Name field in Hostinger.
  3. In Brevo, click Copy DKIM 1 record TXT value next to the TXT value field and paste it into the TXT value field in Hostinger.
    hostinger_dkim-record (1).jpg
  4. In Hostinger, leave the TTL field as is.
  5. In Hostinger, click Add Record.

DKIM 2 record

  1. In Hostinger, under Manage DNS records, select CNAME from the Type dropdown.
  2. In Brevo, click Copy DKIM 2 record name next to the Name field and paste it into the Name field in Hostinger.
  3. In Brevo, click Copy DKIM 2 record TXT value next to the TXT value field and paste it into the TXT value field in Hostinger.hostinger_dkim-record (1) (1).jpg
  4. In Hostinger, leave the TTL field as is.
  5. In Hostinger, click Add Record.

Add the DMARC record

You'll follow the same process for the DMARC record:

  1. In Hostinger, under Manage DNS records, select TXT from the Type dropdown.
  2. In Brevo, click Copy DKIM record name next to the Name field and paste it into the Name field in Hostinger.
  3. In Brevo, click Copy DKIM record data next to the TXT value field and paste it into the TXT value field in Hostinger.
    hostinger_dmarc-record (1).jpg
  4. In Hostinger, leave the TTL field as is.
  5. In Hostinger, click Add Record.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

IONOS

To authenticate your domain in IONOS:

  1. Open a new tab in your web browser and log in to your IONOS account.
  2. Click Domains & SSL.
    ionos_access-domain_en-us.jpg
  3. Next to the domain you want to authenticate, click the ⚙️ gear icon and select DNS. This is where you'll add your DNS records.
    ionos_dns_en-us.jpg

Add the Brevo code

  1. Click Add record.
  2. Select TXT.
  3. In Brevo, click Copy Brevo code hostname next to the Hostname field and paste it into the Host name field in IONOS.
  4. In Brevo, click Copy Brevo code value next to the Value field and paste it into the Value field in IONOS.
    ionos_brevo-code.jpg
  5. Leave the TTL field as is.
  6. Click Save.

Add the DKIM record

You'll follow the same process for the DKIM record.

Depending on when your Brevo account was created, you may need to add either two DKIM records of CNAME type or one DKIM record of TXT type. To view the right instructions, select the tab below the table that matches the type of DKIM records shown on your screen:

Two DKIM records of CNAME type One DKIM record of TXT type
authenticate_2-dkim-cname_en-us.png authenticate_1-dkim-txt_en-us.png
Two DKIM records of CNAME type One DKIM record of TXT type

Add two DKIM records of CNAME type:

DKIM 1 record

  1. Click Add record.
  2. Select CNAME.
  3. In Brevo, click Copy DKIM 1 record hostname next to the Hostname field and paste it into the Host name field in IONOS.
  4. In Brevo, click Copy DKIM 1 record value next to the Value field and paste it into the Points to field in IONOS.
    ionos_DKIM-record.jpg
  5. Leave the TTL field as is.
  6. Click Save.

DKIM 2 record

  1. Click Add record.
  2. Select CNAME.
  3. In Brevo, click Copy DKIM 2 record hostname next to the Hostname field and paste it into the Host name field in IONOS.
  4. In Brevo, click Copy DKIM 2 record value next to the Value field and paste it into the Points to field in IONOS.ionos_DKIM-record (1).jpg
  5. Leave the TTL field as is.
  6. Click Save.

Add the DMARC record

You'll follow the same process for the DMARC record:

  1. Click Add record.
  2. Select TXT.
  3. In Brevo, click Copy DMARC record hostname next to the Hostname field and paste it into the Host name field in IONOS.
  4. In Brevo, click Copy DMARC record value next to the Value field and paste it into the Value field in IONOS.
    ionos_dmarc-record.jpg
  5. Leave the TTL field as is.
  6. Click Save.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

OVH

To authenticate your domain in OVH:

  1. Open a new tab in your web browser and log in to your OVH account.
  2. Go to the Web Cloud tab.
  3. In the left-side panel, under Domain names, select the domain you want to authenticate.
  4. Go to the DNS zone tab. This is where you'll add your DNS records.
    ovh_access-dns_en-us.jpg

Add the Brevo code

  1. On the right-hand side, click Add an entry.
  2. Select TXT.
  3. In Brevo, click Copy Brevo code sub-domain next to the Sub-domain field and paste it into the Sub-domain field in OVH, or leave the field empty if instructed to do so.
  4. Leave the TTL field as is.
  5. In Brevo, click Copy Brevo code value next to the Value field and paste it into the Value field in OVH.
    ovh_brevo-code.jpg
  6. Click Next.
  7. Verify your information and click Confirm.

Add the DKIM record

You'll follow the same process for the DKIM record.

Depending on when your Brevo account was created, you may need to add either two DKIM records of CNAME type or one DKIM record of TXT type. To view the right instructions, select the tab below the table that matches the type of DKIM records shown on your screen:

Two DKIM records of CNAME type One DKIM record of TXT type
authenticate_2-dkim-cname_en-us.png authenticate_1-dkim-txt_en-us.png
Two DKIM records of CNAME type One DKIM record of TXT type

Add two DKIM records of CNAME type:

DKIM 1 record

  1. On the right-hand side, click Add an entry.
  2. Select CNAME.
  3. In Brevo, click Copy DKIM 1 record sub-domain next to the Sub-domain field and paste it into the Sub-domain field in OVH.
  4. Leave the TTL field as is.
  5. In Brevo, click Copy DKIM 1 record value next to the Value field and paste it into the Target field in OVH.
    ovh_dkim-record.jpg
  6. Click Next.
  7. Verify your information and click Confirm.

DKIM 2 record

  1. On the right-hand side, click Add an entry.
  2. Select CNAME.
  3. In Brevo, click Copy DKIM 2 record sub-domain next to the Sub-domain field and paste it into the Sub-domain field in OVH.
  4. Leave the TTL field as is.
  5. In Brevo, click Copy DKIM 2 record value next to the Value field and paste it into the Target field in OVH.ovh_dkim-record copy.jpg
  6. Click Next.
  7. Verify your information and click Confirm.

Add the DMARC record

You'll follow the same process for the DMARC record:

  1. On the right-hand side, click Add an entry.
  2. Select TXT.
  3. In Brevo, click Copy DMARC record sub-domain next to the Sub-domain field and paste it into the Sub-domain field in OVH.
  4. Leave the TTL field as is.
  5. In Brevo, click Copy DMARC record value next to the Value field and paste it into the Value field in OVH.
    ovh_dmarc-record.jpg
  6. Click Next.
  7. Verify your information and click Confirm.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

Wix

To authenticate your domain on Wix:

  1. Open a new tab in your web browser and log in to your Wix account.
  2. Click your account dropdown and select Domains.
  3. Next to the domain you want to authenticate, click the three dots icon and select Manage DNS records. This is where you'll add your DNS records.
    wix_access.jpg

Add the Brevo code

  1. Under TXT (Text), click + Add Record.
  2. In Brevo, click Copy Brevo code host name next to the Host name field and paste it into the Host name field in Wix, or leave the field empty if instructed to do so.
  3. In Brevo, click Copy Brevo code value next to the Value field and paste it into the Value field in Wix.
    wix_brevo-code.jpg
  4. Leave the TTL field as is.
  5. Click Save.

Add the DKIM record

You'll follow the same process for the DKIM record.

Depending on when your Brevo account was created, you may need to add either two DKIM records of CNAME type or one DKIM record of TXT type. To view the right instructions, select the tab below the table that matches the type of DKIM records shown on your screen:

Two DKIM records of CNAME type One DKIM record of TXT type
authenticate_2-dkim-cname_en-us.png authenticate_1-dkim-txt_en-us.png
Two DKIM records of CNAME type One DKIM record of TXT type

Add two DKIM records of CNAME type:

DKIM 1 record

  1. Under CNAME (Aliases), click + Add Record.
  2. In Brevo, click Copy DKIM 1 record host name next to the Host name field and paste it into the Host name field in Wix.
  3. In Brevo, click Copy DKIM 1 record value next to the Value field and paste it into the Value field in Wix.
    wix_dkim-record.jpg
  4. Leave the TTL field as is.
  5. Click Save.

DKIM 2 record

  1. Under CNAME (Aliases), click + Add Record.
  2. In Brevo, click Copy DKIM 2 record host name next to the Host name field and paste it into the Host name field in Wix.
  3. In Brevo, click Copy DKIM 2 record value next to the Value field and paste it into the Value field in Wix.wix_dkim-record copy.jpg
  4. Leave the TTL field as is.
  5. Click Save.

Add the DMARC record

You'll follow the same process for the DMARC record:

  1. Under TXT (Text), click + Add Record.
  2. In Brevo, click Copy DMARC record host name next to the Host name field and paste it into the Host name field in Wix.
  3. In Brevo, click Copy DMARC record value next to the Value field and paste it into the Value field in Wix.
    wix_dmarc-record.jpg
  4. Leave the TTL field as is.
  5. Click Save.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

Other
❗️ Important
The values provided below may vary depending on your specific domain provider. If you encounter issues while authenticating your domain, we suggest contacting your domain provider's support team for assistance to clarify the required format. If you're unsure what your domain provider is, check our dedicated article Identify your domain provider.

To authenticate your domain:

  1. Open a new tab in your web browser and log in to your domain provider account.
  2. Navigate to the page where you can view the DNS records for the domain you want to authenticate.

Add the Brevo code

  1. Create a new DNS record of TXT type.
  2. In Brevo, click Copy Brevo code name next to the Hostname field and paste it into the corresponding field of your domain provider.
    ❗️ Important

    If your domain provider does not support this value, try entering "@", your domain name, or leaving the field blank.

  3. In Brevo, click Copy Brevo code value next to the Data field and paste it into the corresponding field of your domain provider.
    authenticate_new_other_brevo-code_en-us.jpeg
  4. Save your DNS record.

Add the DKIM record

You'll follow the same process for the DKIM record.

Depending on when your Brevo account was created, you may need to add either two DKIM records of CNAME type or one DKIM record of TXT type. To view the right instructions, select the tab below the table that matches the type of DKIM records shown on your screen:

Two DKIM records of CNAME type One DKIM record of TXT type
authenticate_2-dkim-cname_en-us.png authenticate_1-dkim-txt_en-us.png
Two DKIM records of CNAME type One DKIM record of TXT type

Add two DKIM records of CNAME type:

DKIM 1 record

  1. Create a new DNS record of CNAME type.
  2. In Brevo, click Copy DKIM 1 record name next to the Name field and paste it into the corresponding field of your domain provider.
  3. In Brevo, click Copy DKIM 1 record value next to the Value field and paste it into the corresponding field of your domain provider.
    authenticate_new_other_dkim1_en-us.jpeg
  4. Save your DNS record.

DKIM 2 record

  1. Create a new DNS record of CNAME type.
  2. In Brevo, click Copy DKIM 2 record name next to the Name field and paste it into the corresponding field of your domain provider.
  3. In Brevo, click Copy DKIM 2 record value next to the Value field and paste it into the corresponding field of your domain provider.authenticate_new_other_dkim2_en-us.jpeg
  4. Save your DNS record.

Add the DMARC record

You'll follow the same process for the DMARC record:

  1. Create a new DNS record of TXT type.
  2. In Brevo, click Copy DMARC record name next to the Hostname field and paste it into the corresponding field of your domain provider.
  3. In Brevo, click Copy DMARC record value next to the Data field and paste it into the corresponding field of your domain provider.
    authenticate_new_other_dmarc_en-us.jpeg
  4. Save your DNS record.

You have added the values for the Brevo code, DKIM, and DMARC. Now, verify if your domain is authenticated in the next section.

Step 2: Verify if your domain is authenticated

You'll now verify if your domain is authenticated. Note that it may take up to 48 hours for your domain to appear as authenticated in Brevo. This delay is due to the time it can take for the DNS records you've added to propagate and be fully applied.

To verify if your domain is authenticated:

  1. In Brevo, click Authenticate this email domain at the bottom of the page displaying the DNS records.
    authenticate_new_verify_en-us (1) (1) (1).jpeg
  2. Check if your domain is authenticated:

    • ✅ If your domain appears as Authenticated, you’re all set!
      auth_domain-status_en-us.png

    • ❌ If your domain is not authenticated, a popup window will appear saying "The domain is not authenticated yet". Try again later by clicking View configuration next to the status, then selecting Authenticate this email domain at the bottom of the page. Note that full authentication can take up to 48 hours.

      💡 Good to know
      If your domain is still not authenticated after 48 hours, check our help article Troubleshooting issues with domain authentication or contact our support team for help.

Option 3: 🤝 Ask someone else to authenticate the domain for you

💡 Good to know
The person you are sending the request to doesn't need a Brevo account to authenticate the domain. They only need access to your domain provider account.

When you choose the Ask someone else to authenticate the domain for you option, you can send an email request to someone else, like your company’s IT specialist or your domain provider's support team, to authenticate the domain on your behalf. This is especially useful if you're not familiar with domain authentication or don't have access to your domain provider.

  1. Enter the email address of the person you want to ask to authenticate the domain.
  2. Click Send request.
    authenticate_new_ask-someone-else_en-us.jpeg

An email has been sent to the email address you provided, explaining why it was sent and who requested their assistance. The email also includes a button to access the DNS records required to authenticate your domain.

FAQs - Domain authentication

Why do I see two CNAME records for DKIM instead of one TXT record?

Having two CNAME records for DKIM provides a more secure way to authenticate your domain. CNAME records delegate control to a trusted service, which reduces the risk of tampering. Additionally, using two CNAME records allows Brevo to rotate keys periodically, with no action required from you, and improves email security.

How can I switch from one TXT record to two CNAME records for DKIM?

To switch to two CNAME records for DKIM, contact our support team by creating a ticket from your account.

I've authenticated my domain, but it still appears as "Not authenticated". What should I do?

When you authenticate your domain, the changes can take up to 48 hours to be fully applied. Note that Brevo has no control over this process and cannot speed it up.

If it's been less than 48 hours since you authenticated your domain:

  1. In Brevo, click the account dropdown and go to Senders, Domains, and Dedicated IPs > Domains.
  2. Click Authenticate next to the domain you authenticated.
  3. Select Authenticate the domain yourself.
  4. Click Continue.
  5. Click Authenticate this email domain at the bottom of the page.
    authenticate_new_verify_faq_en-us.png

You can follow this process a few times in the next 48 hours. If your domain still does not appear as authenticated after 48 hours, check our troubleshooting article Troubleshooting issues with domain authentication or contact our support team for help.

Which domain should I authenticate?

You should authenticate the domain or subdomain that you use for sending emails through Brevo. This domain or subdomain is called the "sender domain". For example, if your email address is marketing@mycompany.com, your sender domain is mycompany.com. If you use multiple domains to send your emails, you should authenticate each of them.

It says my DMARC record is missing a rua tag. What should I do?

To comply with Gmail, Yahoo, and Microsoft's requirements for email senders, your domain should have one DMARC record with a rua tag. If your domain already has a DMARC record but is missing a rua tag, you’ll need to update the record by adding Brevo's rua tag at the end.

  1. Open a new tab in your web browser and log in to your domain provider account.
  2. Go to your domain settings, where you manage the DNS records.
  3. Locate and edit your existing DMARC record.
  4. In the DMARC record’s value field, add Brevo's rua tag at the end:
    ; rua=mailto:rua@dmarc.brevo.com.

  5. Save your DMARC record.

Your DMARC record should now look like this:

v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

❗️ Important
Your domain should have only one DMARC record. If you have multiple DMARC records, check our dedicated section in the article Troubleshooting issues with domain authentication (Brevo code, DKIM, DMARC).
Do I need to add an SPF or MX record to authenticate my domain?

The SPF and MX records are not required to authenticate a domain. We only provide these records when setting up a dedicated IP.

Can I use a 2048-bit key (sib2k) for my DKIM record of TXT type?
💡 Good to know
By default, DKIM records of CNAME type use a 2048-bit key.

By default, DKIM records of TXT type use a 1024-bit DKIM key. If you want to use a 2048-bit DKIM key to enhance your email security, contact our support team to activate it for your account. Your 2048-bit DKIM key will then appear in your DNS records with a value starting with sib2k.

1024-bit DKIM key (default) 2048-bit DKIM key
authenticate_troubleshooting_1024_en-us.png authenticate_troubleshooting_2048_en-us.png
❗️ Important

If you previously used the 1024-bit DKIM key to authenticate your domain, you'll need to update your existing DKIM record with the new value in your domain provider.

How to verify if my emails have been signed with DKIM?

Webmail services allow you to check if your email has been signed with your domain by reviewing your email headers and looking for the reference dkim=pass. If you need help finding your email headers, check our dedicated article How do I find email headers?.

email_header.jpg

In the above example from a Gmail email header, the reference dkim=pass confirms that the email is signed with the domain thegreenyoga.com.

Can I modify or delete the DNS records from my domain provider once it is authenticated?

To ensure your emails are correctly sent, keep the DNS records as they are in your domain provider as long as you are using Brevo to send emails. Modifying or deleting these DNS records may lead to email delivery problems or your emails being marked as spam.

⏭️ What's next?

🤔 Have a question?

If you have a question, feel free to contact our support team by creating a ticket from your account. If you don't have an account yet, you can contact us here.

If you’re looking for help with a project using Brevo, we can match you with the right certified Brevo Agency partner.

💬 Was this article helpful?

1049 out of 1736 found this helpful