T
transmit.

Domain Verification

Complete guide to verifying your sending domain with DKIM, SPF, DMARC, and MAIL FROM alignment.

Authenticate your sending domain to maximize deliverability and protect your brand. Transmit verifies multiple DNS records to ensure your emails are trusted by inbox providers.

This is typically the first step after creating your account. A fully verified domain unlocks all sending features.

What Gets Verified

Transmit checks five types of DNS records:

RecordPurposeRequired
DKIMCryptographic email signingYes
SPFAuthorizes sending serversYes
DMARCPolicy enforcement and reportingRecommended
MAIL FROMReturn-path alignment for SPFRecommended
MXInbound email receivingOnly if using inbound

A domain is considered verified when DKIM and SPF pass. DMARC and MAIL FROM improve deliverability further.


Setup Guide

Step 1: Add Your Domain

  1. Go to Domains in the dashboard
  2. Click Connect Domain
  3. Enter your domain (e.g., yourdomain.com or mail.yourdomain.com)

Transmit will generate all the DNS records you need to add.

Step 2: Add DKIM Records

Add three CNAME records to your DNS provider. These enable cryptographic signing of your emails.

TypeNameValue
CNAME[token1]._domainkey[token1].dkim.amazonses.com
CNAME[token2]._domainkey[token2].dkim.amazonses.com
CNAME[token3]._domainkey[token3].dkim.amazonses.com

The exact tokens are shown in your dashboard. Copy them directly to avoid typos.

DNS Provider Tips:

  • Cloudflare: Disable the orange proxy cloud for these records
  • GoDaddy/Namecheap: They auto-append your domain, so only enter the [token]._domainkey part
  • Route 53: Use the full hostname including your domain

Step 3: Add SPF Record

Add a TXT record at your root domain to authorize sending:

TypeNameValue
TXT@ (or root)v=spf1 include:amazonses.com ~all

If you already have an SPF record, add include:amazonses.com to it:

v=spf1 include:_spf.google.com include:amazonses.com ~all

Step 4: Add DMARC Record

Add a TXT record for DMARC policy:

TypeNameValue
TXT_dmarcv=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com

Start with p=none to monitor, then move to p=quarantine or p=reject once confident.

For full SPF alignment, add records for the mail.yourdomain.com subdomain:

TypeNameValue
MXmail10 feedback-smtp.us-east-1.amazonses.com
TXTmailv=spf1 include:amazonses.com ~all

The region in the MX record depends on your account. Check your dashboard for the exact value.

Step 6: Verify

Click Verify DNS in the dashboard. Transmit will:

  • Check all DNS records
  • Create the necessary sending configuration
  • Enable your domain for sending

Verification Status

Your domain will show one of these states:

StatusMeaning
VerifiedAll required records found. Ready to send.
PendingWaiting for DNS propagation.
FailedRecords not found or misconfigured.

Individual records also show their own status. You can send once DKIM and SPF are verified, even if DMARC is still pending.


Domain Health

Transmit monitors your domain's sending health with a Health Score (0-100) based on:

  • Delivery rate
  • Bounce rate
  • Complaint rate
  • Engagement (opens/clicks)

View your health score in Domains → [Your Domain].

Health Alerts

If issues are detected, you'll see warnings:

WarningMeaningAction
High bounce rate>5% of emails bouncingClean your list, check addresses
High complaint rate>0.1% spam complaintsReview content, check consent
DKIM issuesSigning problemsRe-verify DNS records

Domain Settings

Once verified, you can configure additional features:

Email Validation

Automatically validate recipient addresses before sending to prevent bounces.

  1. Go to Domains → [Your Domain]
  2. Enable Email Validation

Available on Marketing Business plans and higher.

Warmup

Gradually increase sending volume to build reputation with a new domain.

Learn about Domain Warmup →

Inbound Email

To receive emails at your domain, add the MX records shown in your domain's Inbound Configuration section.

Learn about Inbound Email →


Troubleshooting

"DNS records not found"

  • Wait 15-30 minutes for DNS propagation
  • Check for typos in record names and values
  • Verify with a DNS checker like dnschecker.org

"DKIM verification failed"

  • Ensure all three CNAME records are added
  • Check that records point to dkim.amazonses.com (not a different domain)
  • Disable Cloudflare proxy (orange cloud) for these records

"SPF verification failed"

  • Ensure the TXT record is at the root domain (not a subdomain)
  • If you have multiple SPF records, merge them into one
  • Check that include:amazonses.com is present

"MAIL FROM failed"

  • Ensure both MX and TXT records exist on the mail subdomain
  • The MX priority should be 10
  • Region in MX record must match your account region

Repair Tool

If your domain shows configuration issues, use the Repair button in the dashboard. This will:

  • Re-create any missing configurations
  • Sync your settings
  • Fix common issues automatically

Multiple Domains

You can add as many domains as your plan allows. Each domain:

  • Has its own verification status
  • Maintains separate reputation
  • Can have different warmup settings
  • Can have different inbound rules

Next Steps