{"id":35674,"date":"2023-06-09T11:11:36","date_gmt":"2023-06-09T11:11:36","guid":{"rendered":"https:\/\/easydmarc.com\/blog\/?p=35674"},"modified":"2026-03-18T06:30:42","modified_gmt":"2026-03-18T06:30:42","slug":"brevo-ex-sendinblue-spf-dkim-setup","status":"publish","type":"post","link":"https:\/\/easydmarc.com\/blog\/brevo-ex-sendinblue-spf-dkim-setup\/","title":{"rendered":"Brevo (ex Sendinblue) SPF & DKIM Setup: Step By Step"},"content":{"rendered":"\n

If you are using Brevo<\/a> and looking for a step-by-step guide to authenticate your email, then you\u2019re in the right place. Email authentication is not only essential for secure email communication but also a crucial step in ensuring the successful delivery of your emails. Google, Yahoo, and now Microsoft have all made email authentication mandatory for bulk email senders. So, if you don\u2019t want your emails to be flagged as spam, rejected, or not delivered at all, follow this guide on Brevo SPF, DKIM, and DMARC configuration and ensure you\u2019re all set.<\/p>\n\n\n\n

The First Step Of Sender Verification On Brevo For SPF And DKIM<\/strong><\/h2>\n\n\n\n


Your first step is to access the Domains<\/em><\/strong> page. To access the Domains<\/em><\/strong> page:
1<\/strong> – click on your name at the top-right side of the screen.
2<\/strong> – Select Senders & IP.<\/em><\/strong>
3<\/strong> – Click on Domains.<\/em><\/strong><\/p>\n\n\n\n

\"Sender<\/figure>\n\n\n\n

On the Domains page, find or add the domain you want to authenticate, and then click ‘Verify’.<\/p>\n\n\n\n

\"Sender<\/figure>\n\n\n\n

Once you click on the ‘Verify’ button, Brevo will provide you with two DNS records: Brevo code and a DKIM record.<\/p>\n\n\n\n

\"Sender<\/figure>\n\n\n\n

The Brevo code is only for domain verification. You need to publish that TXT record in your DNS for your domain to be verified.

Now we\u2019ll delve into the details of domain authentication and explain how to add SPF and DKIM records in your DNS provider.<\/p>\n\n\n\n

Brevo SPF Record Configuration<\/strong><\/h2>\n\n\n\n

Note:<\/strong> There is no need to set up an SPF record for Brevo, as the “Envelope From” domain will always be handled by Brevo’s servers. For SPF to be aligned, you should have your \u201cFrom address\u201d domain in the \u201cEnvelope From\u201d address.  Brevo uses “af.d.mailin.fr”, \u201ckh.d.sender-sib.com\u201d and other domains as the “Envelope From” domain. During the DMARC record lookup<\/a>, this “Envelope From” domain will not match with your \u201cFrom address\u201d domain, so SPF alignment will fail. This happens not only with Brevo but with the majority of Email Service Providers.
If you add the include provided by Brevo (include:spf.sendinblue.com<\/em><\/strong>) in your SPF record, your SPF record will look like the one below,
v=spf1 include:zoho.com include:spf.sendinblue.com<\/em><\/strong> ~all

Also, keep in mind that DMARC requires either DKIM or SPF to be authenticated and aligned, so you will pass the DMARC check even without SPF alignment. SPF alignment failing won’t affect your email deliverability if you have DKIM in place. Thus, you need to set up only DKIM for Brevo.<\/p>\n\n\n\n

Brevo DKIM Record Configuration<\/strong><\/h2>\n\n\n\n

Brevo provides you with a DKIM TXT record to publish in your DNS zone.<\/p>\n\n\n\n

\"Brevo<\/figure>\n\n\n\n

How to Add the Provided TXT Record in Your DNS?<\/strong><\/h2>\n\n\n\n

Step 1: Head to your DNS and create a new DNS record, <\/strong>setting the type to TXT<\/em><\/strong>.<\/p>\n\n\n\n

Step 2:<\/strong> Copy the Hostname field to paste into the corresponding field in your DNS. For the TXT name\/host, what you enter depends on your DNS host. Some require you to enter the full mail._domainkey.coco-tex.com<\/em><\/strong>, others only need the mail._domainkey<\/em><\/strong> part, as it automatically appends your domain name at the end.<\/p>\n\n\n\n

Step 3: <\/strong>In the Value\/Content field, copy and paste the generated Value code under the DKIM record.
Like the one below (DNS Cloudflare),<\/p>\n\n\n\n

\"Brevo<\/figure>\n\n\n\n

Once you have finished publishing the TXT records in your DNS, return to your Brevo account and click the Check Configuration<\/em><\/strong> button. If everything is done properly, a green check mark appears next to the Value fields for the DKIM record.<\/p>\n\n\n\n

\"Brevo<\/figure>\n\n\n\n

Brevo DMARC Configuration with EasyDMARC<\/strong><\/h2>\n\n\n\n

It\u2019s <\/strong>essential to note<\/strong> that DMARC compliance for Brevo is achieved solely through DKIM authentication and <\/span>alignment. Although you\u2019ve not configured SPF, DMARC will still pass. <\/p>\n\n\n\n

So, after having SPF and DKIM in place, it\u2019s time to authenticate with a DMARC policy.<\/a> DMARC is a complex protocol, but if you\u2019ve decided to do it yourself, here is a checklist to follow:<\/p>\n\n\n\n