--- title: "Learning to Set Up SPF, DKIM, and DMARC For Klaviyo | DuoCircle" description: "Learning to Set Up SPF, DKIM, and DMARC For Klaviyo." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/email-security/learning-to-set-up-spf-dkim-and-dmarc-for-klaviyo/" --- Quick Answer Klaviyo (over 6.9 billion consumer profiles as of June 2023) requires SPF, DKIM, and DMARC for email-marketing deliverability and to comply with the Google and Yahoo bulk-sender rules. SPF and DKIM setup: in Klaviyo go to Settings > Domains > Add Domain, accept the suggested sending subdomain, and copy the generated CNAME and TXT records into the domain's DNS zone (one CNAME, two DKIM CNAMEs, one TXT). Click Verify Records, then Activate; status flips to Active. DMARC setup: Settings > Domains and Hosting > Get Started, fill in Root Domain and Sending Domain, copy the three CNAMEs and one TXT into DNS, click Continue to Verify Domain, and wait 24-48 hours for propagation. Start at p=none with rua reporting, monitor 2-4 weeks, then advance to p=quarantine and p=reject. Learning to Set Up SPF, DKIM, and DMARC For Klaviyo Your browser does not support the audio element. [ Download episode](https://media.mailhop.org/duocircle/images/2024/02/Learning-to-Set-Up-SPF-DKIM-and-DMARC-For-Klaviyo.mp3) Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Femail-security%2Flearning-to-set-up-spf-dkim-and-dmarc-for-klaviyo%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Learning%20to%20Set%20Up%20SPF%2C%20DKIM%2C%20and%20DMARC%20For%20Klaviyo&url=undefined%2Fblog%2Femail-security%2Flearning-to-set-up-spf-dkim-and-dmarc-for-klaviyo%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Femail-security%2Flearning-to-set-up-spf-dkim-and-dmarc-for-klaviyo%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Femail-security%2Flearning-to-set-up-spf-dkim-and-dmarc-for-klaviyo%2F&title=Learning%20to%20Set%20Up%20SPF%2C%20DKIM%2C%20and%20DMARC%20For%20Klaviyo "Share on Reddit") [ ](mailto:?subject=Learning%20to%20Set%20Up%20SPF%2C%20DKIM%2C%20and%20DMARC%20For%20Klaviyo&body=Check out this article: undefined%2Fblog%2Femail-security%2Flearning-to-set-up-spf-dkim-and-dmarc-for-klaviyo%2F "Share via Email") ![DuoCircle blog post image](https://media.mailhop.org/duocircle/images/2024/02/spf-record-1.jpg) As of June 30, 2023, Klaviyo has assembled over [6.9 billion](https://marketsplash.com/klaviyo-statistics/) consumer profiles across its customer base, placing it as one of the most used platforms for marketing automation for [email marketing](/email-services/the-dos-donts-of-email-marketing-some-crucial-aspects-you-must-pay-heed-to/), SMS, and [CDP](https://www.oracle.com/cx/customer-data-platform/what-is-cdp/). Taking these growth factors into consideration, we are sharing the email authentication guide for **Klaviyo users** so that they [stay abreast of phishing and spoofing attackers](https://www.fbi.gov/how-we-can-help-you/scams-and-safety/common-scams-and-crimes/spoofing-and-phishing). ## Why Email Authentication Matters for Klaviyo Users? _[Email authentication](/resources/email-authentication) is the process of confirming if email senders are actually who they are claiming to be and are not impersonating brands, employees, and individuals._ It also improves your domain’s reputation and increases the chances of **emails landing in inboxes** instead of spam folders. Broadly speaking, [email security](/), an integral part of [phishing prevention](/content/phishing-prevention), aids in warding off [phishing attempts](https://www.iranintl.com/en/202402164333) as well as mitigating any [legal complications](https://www.whitecase.com/insight-alert/cybersecurity-developments-and-legal-issues#:~:text=The%20consequences%20of%20cybersecurity%20breaches,investigations%20and%20even%20criminal%20liability.) that might arise from such events. Emphasizing [phishing protection](/email/phishing-protection) in our [digital safety](/email-security/data-privacy-and-protection-11-ways-to-protect-user-data/) measures is key to ensuring this **level of security**. Moreover, it is also becoming one of the compliances for many platforms and government regulations. We will be discussing setting up the three primary [email authentication protocols](/content/spf-records/spf-record-breakdown), Sender Policy Framework ([SPF](/content/spf-record-check)), DomainKeys Identified Mail (**DKIM**), and Domain-based Message Authentication Reporting and Conformance (DMARC). [![DMARC policy](https://media.mailhop.org/duocircle/images/2024/02/dkim-selector-1.jpg)](https://media.mailhop.org/duocircle/images/2024/02/dkim-selector-1.jpg) ## How to Get Started with Email Authentication for Klaviyo? Post the [new requirements of Google and Yahoo](https://dmarcreport.com/blog/google-and-yahoos-new-email-authentication-policy-for-2024/), more emails are **bouncing back**, especially for senders lacking SPF, [DKIM](/resources/what-is-dkim), and DMARC or due to [misconfigured DNS records](https://www.bleepingcomputer.com/news/microsoft/hotmail-email-delivery-fails-after-microsoft-misconfigures-dns/). So, here are step-by-step instructions for getting started with email authentication for Klaviyo. ### Setting Up SPF and DKIM 1. Go to Klaviyo, navigate your account name on the below-left corner of the screen, and click on ‘**Settings**.’ 2. Then click on ‘**Domains**.’ 3. Select the ‘**Add Domain**’ tab to get started with the configuration process. 4. The platform will fill your domain and create a subdomain for you on its own. You can change the sending subdomain. 5. Next, Klaviyo produces records that you can add to your DNS so that recipients’s servers can access them for verification and authentication. 6. Copy the [CNAME record](https://en.wikipedia.org/wiki/CNAME%5Frecord), go to your DNS zone to create a new CNAME record, and **paste the copied record** there. 7. Then copy the first [DKIM record](https://www.cloudns.net/wiki/article/141/), go to your DNS zone to create a new CNAME record, and paste the copied record there. 8. Now, copy the second DKIM record, go to your DNS zone to create a new CNAME record, and paste the copied record there. 9. Lastly, copy the final [TXT record](https://www.cloudflare.com/learning/dns/dns-records/dns-txt-record/), go to your **DNS zone** to create a new TXT record, and paste the copied record there. 10. Once all the records are added to your DNS zone, navigate back to Klaviyo and click on the “**Verify Records**” button. 11. Once done, you will notice that all the warnings are changed to green. 12. Click on ‘**Activate**‘. 13. You are done. You will see your domain as ‘**Active**.’ ### Setting Up DMARC #### Go to the ‘Domains and Hosting’ tab in Klaviyo: - Navigate to the top right corner of your account and choose your organization name from the drop-down list. - On the ‘Account’ page, click the ‘Settings’ drop-down and opt for ‘**Domains and Hosting**‘ from the main tab. - Click on ‘Get Started’ to proceed. #### Produce DNS records: - Complete the ‘Set Dedicated Domain’ form by entering values for ‘[Root Domain](https://world.siteground.com/kb/what-is-a-root-domain/#:~:text=It%20is%20the%20topmost%20part,org%2C%20.)‘ and ‘[Sending Domain](https://developers.sparkpost.com/api/sending-domains/#:~:text=A%20sending%20domain%20is%20a,servers%20to%20authenticate%20your%20messages.),’ then click ‘Continue.’ - **Klaviyo will generate** DNS records that need to be published in your DNS to enable email authentication for your domain. #### Update your DNS records: - Log in to your ‘DNS management console’ and locate the ‘[DNS records](/data-privacy/dns-record-types-defined-and-explained/)‘ section. - Copy the **three CNAME records** and add them to your DNS. - Similarly, copy the last TXT record and include it in your DNS configuration. #### Click ‘Continue to Verify Domain’. - Note: After completion, wait for 24-48 hours for your DNS changes to propagate, then revisit your Klaviyo account. #### Initiate the domain application. - If your domain is successfully verified, the final step will appear. - You will be presented with two options: ‘Apply Domain’ and ‘Cancel Dedicated Domain Setup.’ Choose ‘**Apply Domain**‘. [![DNS configuration](https://media.mailhop.org/duocircle/images/2024/02/email-sending-services-0707.jpg)](https://media.mailhop.org/duocircle/images/2024/02/email-sending-services-0707.jpg) ## How Can We Help You? Klaviyo’s user base is vast, and we understand how confusing the whole email authentication setup can get. We at DuoCircle offer assistance with everything related to [DMARC](/email/dmarc), right from the initial guidance to implementation to reporting. All you have to do is [get in touch with our support executives](/contact) and book a demo. We are GDPR compliant and have a **99.99% uptime**. So, let’s catch up to discuss your work and our journey towards a safer [email infrastructure](/email-security/setting-up-your-new-businesss-email-infrastructure-email-security/) across the globe. ## Topics DMARCemail securitySecurity ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) ## Related Articles [ Email Security 12m DMARC, SPF, and DKIM in 2026: Why Email Authentication Is Now a Regulatory Requirement, Not Just a Best Practice Apr 29, 2026 ](/blog/dmarc-spf-dkim-2026-email-authentication-regulatory-requirement-best-practice/)[ Email Security 5m Email Monitoring Tools: A Complete Guide to Protecting Your Email Ecosystem May 7, 2026 ](/blog/email-monitoring-tools-guide-protecting-your-email-ecosystem-security/)[ Email Security 15m 12 Best Hosted SMTP Servers for High Deliverability in 2026 Apr 8, 2026 ](/blog/email-security/12-best-hosted-smtp-servers-for-high-deliverability-in-2026/)[ Email Security 6m 5 efficient email security techniques for advanced persistent threats Dec 3, 2024 ](/blog/email-security/5-efficient-email-security-techniques-for-advanced-persistent-threats/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"Learning to Set Up SPF, DKIM, and DMARC For Klaviyo","description":"Learning to Set Up SPF, DKIM, and DMARC For Klaviyo.","url":"https://www.duocircle.com/blog/email-security/learning-to-set-up-spf-dkim-and-dmarc-for-klaviyo/","datePublished":"2024-02-20T18:09:23.000Z","dateModified":"2025-04-28T15:38:51.000Z","dateCreated":"2024-02-20T18:09:23.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/email-security/learning-to-set-up-spf-dkim-and-dmarc-for-klaviyo/"},"articleSection":"email-security","keywords":"DMARC, email security, Security","wordCount":759,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2024/02/spf-record-1.jpg","caption":"DuoCircle blog post image","width":900,"height":604},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"Email Security"},{"@type":"ListItem","position":3,"name":"Learning to Set Up SPF, DKIM, and DMARC For Klaviyo","item":"https://www.duocircle.com/blog/email-security/learning-to-set-up-spf-dkim-and-dmarc-for-klaviyo/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"Email Security","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Learning to Set Up SPF, DKIM, and DMARC For Klaviyo","item":"https://www.duocircle.com/blog/email-security/learning-to-set-up-spf-dkim-and-dmarc-for-klaviyo/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"Learning to Set Up SPF, DKIM, and DMARC For Klaviyo","description":"Learning to Set Up SPF, DKIM, and DMARC For Klaviyo.","url":"https://www.duocircle.com/blog/email-security/learning-to-set-up-spf-dkim-and-dmarc-for-klaviyo/","datePublished":"2024-02-20T18:09:23.000Z","dateModified":"2025-04-28T15:38:51.000Z","dateCreated":"2024-02-20T18:09:23.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/email-security/learning-to-set-up-spf-dkim-and-dmarc-for-klaviyo/"},"articleSection":"email-security","keywords":"DMARC, email security, Security","wordCount":759,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2024/02/spf-record-1.jpg","caption":"DuoCircle blog post image","width":900,"height":604},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```