# SPF record for Adobe Marketo Engage

URL: https://iblockspam.com/spf/marketo
Last updated: 2026-11-03

Include: include:mktomail.com
Where it goes: Your company domain (@), once per sending domain
DNS lookups: 1 of 10

Adobe Marketo Engage asks you to add include:mktomail.com to the SPF record of each domain you send from. Adobe's example is v=spf1 mx ip4:[CorpIP] include:mktomail.com ~all; if a record exists, add only the include. It costs 1 DNS lookup. SPF only aligns for DMARC with a branded return-path domain, so Adobe recommends DKIM.

## Example records

- Marketo and your own mail server (Adobe's example) (TXT, host @): `v=spf1 mx ip4:203.0.113.10 include:mktomail.com ~all` Replace 203.0.113.10 with your corporate mail server's IP address, which Adobe writes as [CorpIP].
- Marketo and Microsoft 365 (TXT, host @): `v=spf1 include:spf.protection.outlook.com include:mktomail.com -all`
- Marketo and Google Workspace (TXT, host @): `v=spf1 include:_spf.google.com include:mktomail.com ~all`

## Notes

- Adobe's page prints the mechanism as `include: mktomail.com`, with a space. SPF doesn't allow a space after the colon, so type `include:mktomail.com`.
- For SPF that aligns with your From domain, Adobe describes a Branded Return-Path Domain with its own SPF record and MX record pointing to the default MX for your data center. Dedicated-IP customers request it from Adobe Support; shared-IP senders may qualify through the Trusted IP program.
- Where filters check the Return-Path, Adobe says to allowlist `*.mktomail.com`, because Marketo uses several mailbox subdomains.

## How to add it

- Give your IT or DNS team the list of domains used in Marketo From addresses; Adobe asks for the include on each one.
- On each domain, find the TXT record on `@` that starts with `v=spf1` and add `include:mktomail.com` to it. If there is none, create one based on Adobe's example.
- Set up DKIM as well, under **Admin > Email > SPF/DKIM**, and publish a DMARC record for the From domain with relaxed alignment.
- Save, then check the live record with the SPF Checker below.

## DKIM and DMARC

Adobe recommends DKIM-aligned DMARC over SPF for Marketo, because the default Return-Path is on `mktomail.com` and can't align with your From domain. A custom DKIM signature is a TXT record per domain (see our [Marketo DKIM page](https://iblockspam.com/dkim/marketo)). Adobe adds that strict SPF alignment (`aspf=s`) isn't supported in Marketo Engage.

## Common mistakes

- Copying Adobe's example with the space after `include:`. The record then fails SPF syntax checks.
- Setting `aspf=s` in DMARC. Adobe says to keep relaxed alignment, which is also the default.
- Adding the include for only the main domain when Marketo also sends from other brands or subdomains.

**Q: What is the SPF include for Marketo?**
`include:mktomail.com`. Adobe's example for your company domain is `v=spf1 mx ip4:[CorpIP] include:mktomail.com ~all`, and if the domain already has an SPF record you add only the include to it.

**Q: Does Marketo mail pass DMARC with SPF?**
Only with a Branded Return-Path Domain. By default the Return-Path is on `mktomail.com`, so SPF passes for Adobe's domain but doesn't align with yours. Adobe recommends a custom DKIM signature for DMARC instead.

**Q: What is a Branded Return-Path Domain in Marketo?**
A return-path domain of your own with its own SPF record and an MX record that points to the default MX for the data center your Marketo mail is sent from. It makes SPF align with your From domain. Adobe Support sets it up.

Sources:
- Adobe Experience League: Configure protocols for Marketo Engage: https://experienceleague.adobe.com/en/docs/marketo/using/getting-started/initial-setup/configure-protocols-for-marketo
- Adobe Experience League: Set up a custom DKIM signature: https://experienceleague.adobe.com/en/docs/marketo/using/product-docs/email-marketing/deliverability/set-up-a-custom-dkim-signature

---

Source: iBlockSpam, https://iblockspam.com/spf/marketo (this is a Markdown copy; the HTML page is canonical). Quote with attribution and a link. Site index for AI assistants: https://iblockspam.com/llms.txt