# SPF record for Squarespace Email Campaigns

URL: https://iblockspam.com/spf/squarespace
Last updated: 2026-10-22

Include: None needed
Where it goes: Not needed
DNS lookups: 0 on your domain

Squarespace Email Campaigns no longer asks for an SPF record. Squarespace says verification used to include one, but its current security features make SPF unnecessary. To verify a domain hosted elsewhere, you add two records: a CNAME at squarespace._domainkey pointing to squarespace-domainkey.squarespace-mail.com, and a DMARC TXT record at _dmarc.

## Example records

- Your main domain on Microsoft 365 stays as it is (TXT, host @): `v=spf1 include:spf.protection.outlook.com -all`
- Your main domain on Google Workspace stays as it is (TXT, host @): `v=spf1 include:_spf.google.com ~all`

## Notes

- Squarespace says the records can take up to 48 hours to resolve, depending on your provider.
- Domains bought from Squarespace, or migrated to it from Google Domains, are verified automatically and need no records.
- If your domain's DMARC policy is `p=reject`, Squarespace says you can't use your sender details until the domain is verified.

## How to add it

- In Squarespace, open the Email Campaigns settings panel, add a sender name and address, and enter the code sent to that address.
- Under Sender details, click Authenticate to see the CNAME and TXT records.
- At your DNS host, add the CNAME `squarespace._domainkey` with the value `squarespace-domainkey.squarespace-mail.com`, and the TXT record at `_dmarc` with the unique value Squarespace shows.
- Leave your SPF record unchanged. When "Domain is unauthenticated" no longer appears under your domain in the sender details, the domain is verified.

## DKIM and DMARC

The CNAME at `squarespace._domainkey` is a DKIM record: it lets Squarespace sign campaigns with your domain, which is what lets them pass DMARC without SPF. See our [Squarespace DKIM page](https://iblockspam.com/dkim/squarespace). The TXT record Squarespace gives is a DMARC record; a domain should have only one, so merge rather than add a second.

## Common mistakes

- Adding an old Squarespace SPF value from a past guide. Squarespace removed the SPF requirement.
- Entering the DMARC value as a second `_dmarc` record when your domain already has one.
- Typing `squarespace._domainkey.example.com` at a DNS host that appends the domain itself, which doubles the name.

**Q: Does Squarespace Email Campaigns need an SPF record?**
No longer. Squarespace says verification previously included an SPF record, but its current security features make one unnecessary, so it removed the requirement. You add a DKIM CNAME and a DMARC TXT record instead.

**Q: Which DNS records verify a third-party domain for Squarespace Email Campaigns?**
Two: a CNAME with host `squarespace._domainkey` and data `squarespace-domainkey.squarespace-mail.com`, and a TXT record with host `_dmarc` and the unique value shown beside it in Squarespace.

**Q: Do I need to verify a domain I bought from Squarespace?**
No. Squarespace says domains bought from it, or migrated to it from Google Domains, are verified automatically for Email Campaigns. Only domains hosted by a third party need the records.

Sources:
- Squarespace Help: Verify your third-party domain for use with Email Campaigns: https://support.squarespace.com/hc/en-us/articles/360001280748-Verify-your-third-party-domain-for-use-with-Email-Campaigns

---

Source: iBlockSpam, https://iblockspam.com/spf/squarespace (this is a Markdown copy; the HTML page is canonical). Quote with attribution and a link. Site index for AI assistants: https://iblockspam.com/llms.txt