# SPF record for Mailchimp

URL: https://iblockspam.com/spf/mailchimp
Last updated: 2026-10-09

Include: None needed
Where it goes: Not needed
DNS lookups: 0 on your domain

Mailchimp doesn't ask you to add anything to your SPF record. Mailchimp says SPF is already set up on all of its sending domains, and its email domain authentication uses two CNAME records for DKIM and one TXT record for DMARC. Publish those, leave your SPF record as it is, and let DKIM align with your domain.

## Example records

- Your main domain on Microsoft 365 stays as it is (TXT, host @): `v=spf1 include:spf.protection.outlook.com -all`
- Your main domain on Google Workspace stays as it is (TXT, host @): `v=spf1 include:_spf.google.com ~all`

## Notes

- If your provider's interface adds your domain to the name automatically, enter only `k2._domainkey` (for example), not the full name, or you'll get `k2._domainkey.example.com.example.com`.
- If you change the CNAME records after authenticating, Mailchimp suggests disabling and re-authenticating the domain.

## How to add it

- In Mailchimp, verify your email domain from the Domains page.
- Start authentication: use the automated setup Mailchimp offers, or choose manual setup.
- For manual setup, copy the two CNAME records (DKIM) and the TXT record for `_dmarc` into your DNS host.
- Back in Mailchimp, click through to finish; Mailchimp checks the records and shows the result on the Domains page.

## DKIM and DMARC

DKIM is what makes Mailchimp mail pass DMARC for your domain: the two CNAMEs let Mailchimp sign with your domain, so the DKIM result aligns with your From address. SPF passes on Mailchimp's own domain, which doesn't align with yours, and that is fine because DMARC needs only one aligned pass.

## Common mistakes

- Adding an include for Mailchimp to your SPF record because an old guide said so. Mailchimp's current setup doesn't ask for one, and every unneeded include costs DNS lookups.

**Q: Do I need to add Mailchimp to my SPF record?**
No. Mailchimp says SPF is already set up on all of its sending domains, and its domain authentication asks only for two DKIM CNAME records and a DMARC TXT record. Leave your SPF record unchanged.

**Q: How does Mailchimp mail pass DMARC then?**
Through DKIM. Once you publish Mailchimp's two CNAME records, Mailchimp signs your campaigns with your domain, and DMARC passes when either SPF or DKIM passes and aligns with your From domain.

**Q: My Mailchimp authentication fails. What should I check?**
Check that the CNAME names weren't doubled by your DNS host (for example `k2._domainkey.example.com.example.com`), that the DMARC TXT record sits on `_dmarc`, and that DNS has had time to update. Our [DMARC Checker](https://iblockspam.com/tools/dmarc-checker) shows the live DMARC record.

Sources:
- Mailchimp Help: Set up email domain authentication: https://mailchimp.com/help/set-up-email-domain-authentication/
- Mailchimp: How Intuit Mailchimp customers can prepare for Gmail and Yahoo's new sender requirements: https://mailchimp.com/newsroom/google-changes-bulk-senders/

---

Source: iBlockSpam, https://iblockspam.com/spf/mailchimp (this is a Markdown copy; the HTML page is canonical). Quote with attribution and a link. Site index for AI assistants: https://iblockspam.com/llms.txt