How to set up SPF, DKIM & DMARC for Resend

Resend verifies a sending domain (or subdomain) with an SPF record and a DKIM key it generates per domain. The dashboard lists the exact records — the SPF include is fixed, the DKIM value is yours alone.

SPF

Published on the send subdomain Resend suggests (or the domain you registered).

Type	`TXT`
Host / Name	`send` Use the exact host shown in your Resend dashboard — send.yourdomain.com is the default suggestion.
Value / Content	`v=spf1 include:amazonses.com ~all` Resend delivers via SES infrastructure, hence the include.

DKIM

Generated per domain in the dashboard.

Type	`TXT`
Host / Name	`resend._domainkey`
Value / Content	`p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCB…` Example only — copy the exact host and value from Resend → Domains → your domain.

Resend → Domains → Add domain.
Publish the records listed (SPF TXT + MX on the send subdomain, DKIM TXT).
Click Verify DNS records.

DMARC

DMARC is per-domain, not per-provider — one record at _dmarc.yourdomain.com covers Resend and everything else that sends as you. Start in monitor-only mode:

Type	`TXT`
Host / Name	`_dmarc` Some providers want the full _dmarc.yourdomain.com here.
Value / Content	`v=DMARC1; p=none; rua=mailto:your-report-address` Example only — replace your-report-address — our DMARC generator builds the record, or sign up free and we generate it with a report address that feeds your monitoring dashboard.

Provider note: Records on a subdomain of your domain align with the root under DMARC's default relaxed mode — both SPF and DKIM count for you.

Full walkthrough: how to set up DMARC without breaking your email, and why aligned authentication is what DMARC actually checks.

Verify it worked

After DNS propagates (minutes to an hour), send a message from Resend to our inbox test — it shows the real SPF/DKIM/DMARC verdicts a receiver computes, including whether authentication aligned with your domain. Then HealthCheck Email keeps checking daily and alerts you when a record breaks.

Records current as of 2026-07-13. Provider dashboards change — the authoritative reference is Resend's official docs.