# SPF record for Intercom

URL: https://iblockspam.com/spf/intercom
Last updated: 2026-10-09

Include: None needed
Where it goes: Not needed (return-path CNAME)
DNS lookups: depends on your account

You don't need to add an SPF record for Intercom. Intercom handles SPF by setting a custom return-path on every email, through one of the CNAME records you add when you authenticate your domain. Intercom asks for two CNAMEs (DKIM and the custom return-path) and one TXT record for DMARC.

## Example records

- Your main domain on Microsoft 365 stays as it is (TXT, host @): `v=spf1 include:spf.protection.outlook.com -all`
- Your main domain on Google Workspace stays as it is (TXT, host @): `v=spf1 include:_spf.google.com ~all`

## Notes

- The DKIM and return-path records are CNAMEs, not TXT records; only the DMARC record is a TXT record.
- If the verification email for your address doesn't arrive, use Intercom's Resend verification email option.

## How to add it

- In Intercom, go to Settings, Channels, Email, Domains & addresses and add or edit your sending address.
- Verify the address through the confirmation email, then choose Authenticate your domain.
- Publish the two CNAME records (DKIM and custom return-path) and the DMARC TXT record exactly as shown.
- If you use Cloudflare, set the CNAME records to DNS only, not Proxied. Then click Verify authentication in Intercom.

## DKIM and DMARC

Intercom's DKIM selector is `intercom`. With DKIM and the return-path CNAME in place, Intercom mail can pass DMARC through both checks. Intercom requires a DMARC record with at least `p=none`.

## Common mistakes

- Entering the DKIM or return-path records as TXT records instead of CNAMEs.
- Letting your DNS host add your domain to the name twice (for example `intercom._domainkey.example.com.example.com`).

**Q: Do I need an SPF record for Intercom?**
No. Intercom says it handles SPF by setting a custom return-path on all the emails it sends, through the return-path CNAME you add. You don't need your own SPF entry unless Intercom advises otherwise.

**Q: Which DNS records does Intercom need?**
Two CNAME records, one for DKIM and one for the custom return-path, and one TXT record for DMARC. Copy them from Settings, Channels, Email, Domains & addresses.

**Q: Does Intercom require DMARC?**
Yes. Intercom requires a DMARC record with at least `p=none`. Move to `p=quarantine` or `p=reject` only after confirming all your senders pass. See our [DMARC record examples](https://iblockspam.com/blog/dmarc-record-examples).

Sources:
- Intercom Help: Troubleshooting email authentication issues (DKIM, DMARC, and DNS setup): https://www.intercom.com/help/en/articles/11183745-troubleshooting-email-authentication-issues-dkim-dmarc-and-dns-setup
- Intercom Help: Email sending FAQs: https://www.intercom.com/help/en/articles/8797915-email-sending-faqs

---

Source: iBlockSpam, https://iblockspam.com/spf/intercom (this is a Markdown copy; the HTML page is canonical). Quote with attribution and a link. Site index for AI assistants: https://iblockspam.com/llms.txt