Domain Verification
Complete guide to verifying your sending domain with DKIM, SPF, DMARC, and MAIL FROM alignment.
Authenticate your sending domain to maximize deliverability and protect your brand. Transmit verifies multiple DNS records to ensure your emails are trusted by inbox providers.
This is typically the first step after creating your account. A fully verified domain unlocks all sending features.
What Gets Verified
Transmit checks five types of DNS records:
| Record | Purpose | Required |
|---|---|---|
| DKIM | Cryptographic email signing | Yes |
| SPF | Authorizes sending servers | Yes |
| DMARC | Policy enforcement and reporting | Recommended |
| MAIL FROM | Return-path alignment for SPF | Recommended |
| MX | Inbound email receiving | Only if using inbound |
A domain is considered verified when DKIM and SPF pass. DMARC and MAIL FROM improve deliverability further.
Setup Guide
Step 1: Add Your Domain
- Go to Domains in the dashboard
- Click Connect Domain
- Enter your domain (e.g.,
yourdomain.comormail.yourdomain.com)
Transmit will generate all the DNS records you need to add.
Step 2: Add DKIM Records
Add three CNAME records to your DNS provider. These enable cryptographic signing of your emails.
| Type | Name | Value |
|---|---|---|
| CNAME | [token1]._domainkey | [token1].dkim.amazonses.com |
| CNAME | [token2]._domainkey | [token2].dkim.amazonses.com |
| CNAME | [token3]._domainkey | [token3].dkim.amazonses.com |
The exact tokens are shown in your dashboard. Copy them directly to avoid typos.
DNS Provider Tips:
- Cloudflare: Disable the orange proxy cloud for these records
- GoDaddy/Namecheap: They auto-append your domain, so only enter the
[token]._domainkeypart - Route 53: Use the full hostname including your domain
Step 3: Add SPF Record
Add a TXT record at your root domain to authorize sending:
| Type | Name | Value |
|---|---|---|
| TXT | @ (or root) | v=spf1 include:amazonses.com ~all |
If you already have an SPF record, add include:amazonses.com to it:
v=spf1 include:_spf.google.com include:amazonses.com ~allStep 4: Add DMARC Record
Add a TXT record for DMARC policy:
| Type | Name | Value |
|---|---|---|
| TXT | _dmarc | v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com |
Start with p=none to monitor, then move to p=quarantine or p=reject once confident.
Step 5: Add MAIL FROM Records (Recommended)
For full SPF alignment, add records for the mail.yourdomain.com subdomain:
| Type | Name | Value |
|---|---|---|
| MX | mail | 10 feedback-smtp.us-east-1.amazonses.com |
| TXT | mail | v=spf1 include:amazonses.com ~all |
The region in the MX record depends on your account. Check your dashboard for the exact value.
Step 6: Verify
Click Verify DNS in the dashboard. Transmit will:
- Check all DNS records
- Create the necessary sending configuration
- Enable your domain for sending
Verification Status
Your domain will show one of these states:
| Status | Meaning |
|---|---|
| Verified | All required records found. Ready to send. |
| Pending | Waiting for DNS propagation. |
| Failed | Records not found or misconfigured. |
Individual records also show their own status. You can send once DKIM and SPF are verified, even if DMARC is still pending.
Domain Health
Transmit monitors your domain's sending health with a Health Score (0-100) based on:
- Delivery rate
- Bounce rate
- Complaint rate
- Engagement (opens/clicks)
View your health score in Domains → [Your Domain].
Health Alerts
If issues are detected, you'll see warnings:
| Warning | Meaning | Action |
|---|---|---|
| High bounce rate | >5% of emails bouncing | Clean your list, check addresses |
| High complaint rate | >0.1% spam complaints | Review content, check consent |
| DKIM issues | Signing problems | Re-verify DNS records |
Domain Settings
Once verified, you can configure additional features:
Email Validation
Automatically validate recipient addresses before sending to prevent bounces.
- Go to Domains → [Your Domain]
- Enable Email Validation
Available on Marketing Business plans and higher.
Warmup
Gradually increase sending volume to build reputation with a new domain.
Inbound Email
To receive emails at your domain, add the MX records shown in your domain's Inbound Configuration section.
Troubleshooting
"DNS records not found"
- Wait 15-30 minutes for DNS propagation
- Check for typos in record names and values
- Verify with a DNS checker like dnschecker.org
"DKIM verification failed"
- Ensure all three CNAME records are added
- Check that records point to
dkim.amazonses.com(not a different domain) - Disable Cloudflare proxy (orange cloud) for these records
"SPF verification failed"
- Ensure the TXT record is at the root domain (not a subdomain)
- If you have multiple SPF records, merge them into one
- Check that
include:amazonses.comis present
"MAIL FROM failed"
- Ensure both MX and TXT records exist on the
mailsubdomain - The MX priority should be
10 - Region in MX record must match your account region
Repair Tool
If your domain shows configuration issues, use the Repair button in the dashboard. This will:
- Re-create any missing configurations
- Sync your settings
- Fix common issues automatically
Multiple Domains
You can add as many domains as your plan allows. Each domain:
- Has its own verification status
- Maintains separate reputation
- Can have different warmup settings
- Can have different inbound rules
Next Steps
- Create Sender Identities — Set up From addresses
- Start Domain Warmup — Build reputation for new domains
- Configure Inbound Email — Receive emails at your domain