Nutshell is a web and mobile customer relationship management (CRM) and email marketing automation service.
This instructional article will demonstrate the FreshService configuration process of Sender Policy Framework (SPF), DomainKeys Identified Mail (DKIM) Signatures to ensure FreshService passes the DMARC alignment check and eliminate spam from your domain and increase security.
SPF records allow receiving servers to check whether an email with the specified source domain was actually sent from a server authorized by the owner of this domain.
DKIM adds a digital record to each message. This allows the receiving server to check if the message has been sent from an authorized sender, faked, or changed upon delivery.
The process of configuring SPF and DKIM
1. Log in to your NutShell platform.
2. From the left sidebar, navigate to Marketing > Setup > Domains.
3. Click on Add New Domain, then enter the domain you want to authorize.
4. Once the domain is added, click on Details to proceed.

5. The system will generate the necessary SPF and DKIM records, which need to be added and published in your DNS zone.


6. Copy and publish each record into your DNS zone.
Screenshot below will show you the example of the records. We’ll be using CloudFlare for this example.
Important Note: Ensure the Proxy Status is disabled and set to DNS Only.
DNS propagation may take some time to complete across the internet.



7. Once the DNS changes have propagated, the record statuses will update to Verified, and your domain will be successfully authenticated.

Congratulations, you now successfully authenticated your outgoing mail stream from NutShell with SPF and DKIM.


