How to set up SPF, DKIM & DMARC for Klaviyo

Klaviyo moves you from its shared sending infrastructure to a dedicated sending domain (a subdomain of yours, e.g. send.yourdomain.com). Klaviyo generates the exact record set — typically three CNAMEs plus a TXT — when you set it up.

Dedicated sending domain records

All values are unique to your account; the wizard lists each host/value pair to publish.

Type	`CNAME`
Host / Name	`kl._domainkey.send`
Value / Content	`dkim1.abc123.klaviyodns.com` Example only — example shape — Klaviyo → Settings → Email → Domains shows your exact set of records.

Klaviyo → Settings → Email → Domains → Set up dedicated sending domain.
Choose the subdomain (Klaviyo suggests send.yourdomain.com).
Publish every record the wizard lists, then click Verify.
Warm the domain: Klaviyo ramps sending gradually after the switch — expected, not a bug.

DMARC

DMARC is per-domain, not per-provider — one record at _dmarc.yourdomain.com covers Klaviyo and everything else that sends as you. Start in monitor-only mode:

Type	`TXT`
Host / Name	`_dmarc` Some providers want the full _dmarc.yourdomain.com here.
Value / Content	`v=DMARC1; p=none; rua=mailto:your-report-address` Example only — replace your-report-address — our DMARC generator builds the record, or sign up free and we generate it with a report address that feeds your monitoring dashboard.

Provider note: On the shared domain, Klaviyo mail doesn't align with your domain at all — a dedicated sending domain is required before you enforce DMARC, or campaign mail will fail policy.

Full walkthrough: how to set up DMARC without breaking your email, and why aligned authentication is what DMARC actually checks.

Verify it worked

After DNS propagates (minutes to an hour), send a message from Klaviyo to our inbox test — it shows the real SPF/DKIM/DMARC verdicts a receiver computes, including whether authentication aligned with your domain. Then HealthCheck Email keeps checking daily and alerts you when a record breaks.

Records current as of 2026-07-13. Provider dashboards change — the authoritative reference is Klaviyo's official docs.