Adding DMARC/SPF/DKIM Records

This is an advanced area, please note there is no free support if a DNS mistake is made - a support fee will apply. 

If you are using a third party to monitor your DMARC reports, please do not use this wizard.

We have a wizard within our Domains/Email section to help try to make this process easier. 

SPF and DKIM records determine which servers may send email on your behalf (using your email address)

DMARC records determine how failures should be handled, and where failure and aggregate reporting can be directed.

DMARC validation requires that either DKIM or SPF validates any individual sender. A failure only occurs if someone attempts to send email who is not specified in the SPF nor DKIM area.

The format of DMARC, SPF and DKIM records is very exacting. If you make a mistake in the way you enter the information, then your DNS might break, and you could cause an outage to your website or email. Please contact our support team if you want us to setup your email validation for you - this will be a chargeable service. 

You may also use bulk mail services, accounting software, payment gateway receipts, etc and these may need to be included in these settings.

How to find the wizard:

1. Go to the Domains and Mail.

2. Select the icon with the two rectangular blocks next to the relevant domain

3. Choose Configure SPF/DMARC Email Validation

You will then see this screen below. 

We have added a preconfigured list of the most used services that will add their last known settings automatically. 

By default, our CMS server will be entitled to send email on your behalf (eg for order notifications, receipts, enquiries, etc)

By default, your primary website and configured mail servers will be entitled to send email on your behalf.

Tick the services you use and submit the form if no other changes to the default settings in the drop down boxes are required. 

When you submit this form, a DMARC record will be created or updated with default settings (DMARC reports will be sent to our CMS platform for analysis). 

To Add DKIM Records

Scroll down further on this page to find DKIM record addition.

This is generally records from your third party that you can cut and paste in, but can still be complicated and may need additional support help.

Please use 1024 bit keys. Please do not use or enter 2048 bit keys.


DMARC RUA and RUF settings

These records aggregate (RUA) and forensic (RUF) can be updated via the DMARC CONSUMER dropdown. These are optional fields so if you have only been provided a RUA entry (which is common) you can set the RUF field blank.

More From This Section

What is a domain name? A domain name is required in order to have a custom web address. Learn how domain names work here.
Follow this procedure to register your new domain name.
If you already have a domain name and want to associate it with your new website, follow these steps:
If you have multiple domains attached to a site, one must be assigned as the primary domain.
To up date the contact details of your registered domains.
How to generate a new authorisation key for your domain managed by us.
The nameservers are the machines that convert web addresses (domain names) to machine IP addresses (numerical addresses)
What happens when your domain name is due for renewal
How to point your domain at a website hosted elsewhere using A Record/CNAME records.
Here is where you need to go to change your authoritative nameservers. Change who is responsible for managing your nameservers.
Get the steps to validate your website via the CMS. Domain verification. Verify domain name. You can access all 3 methods of domain verification in the domains tab.
Gmail and Yahoo have announced changes that require you to add a DMARC record on your domain before February 1, 2024 if you’d like to continue sending emails from a branded email address.
What to do if you haven't renewed your domain name on time and decide you want to keep it
How to set up a subdomain eg. example.yourdomain.co.nz
Where do I find and the how do I understand my website's statistics?
Sometimes users experience website outages that may not actually be a website outage, but actually an outage of the clients connection, or some link in the middle. Read on.
Q: Will Google Apps work with a free parked domain name? A: Yes, but we do not provide any free support for this. Our support obligation for free parked domain names is "Master nameservers" and "Registry Contacts" and "Billing". It does not include "A-Records and CNAME and MX" However, DNS is active in any state other than NEW/DELETED.
Some unethical web designers and other registrars fail to set you as the registrant name, and instead use their own name. This is against the .nz rules.
It is a complicated business to purchase a domain name that is registered to someone else. Our support is strictly limited to the following advice.

FAQ Topics

Search for help:

> Home