Glossary

How to Set Up SPF and DKIM for SMTP2GO?

Published on
October 1, 2025

How do I add my sender domain in Palisade?

Start by opening the Settings tab on the left side of the Palisade dashboard, select “Verified Senders,” and click “Add Sender Domain.” This registers your domain for authentication.

What CNAME records do I need for SPF and DKIM?

Palisade provides three CNAME records. The first points to return.palisade.email for SPF alignment, the second secures DKIM signing, and the third handles click/open tracking (optional).

How do I publish the SPF CNAME record?

Copy the SPF CNAME value and add it to your DNS host (e.g., Cloudflare) as a CNAME pointing to return.palisade.email. This ensures your domain inherits the provider’s whitelisted IPs.

How do I publish the DKIM CNAME record?

Similarly, add the DKIM CNAME to your DNS. This enables cryptographic signing of outgoing mail, improving deliverability.

Do I need to modify my existing SPF record?

No. Palisade’s SPF CNAME works alongside your current SPF record, preserving alignment without extra changes.

What about the third CNAME record?

The third CNAME handles tracking links for opens and clicks. You can add it if you want detailed engagement metrics, but it’s optional for basic authentication.

How can I verify that my DNS changes are correct?

Use Palisade’s Email Investigation tool to run a live test. It checks the SPF and DKIM status and reports any issues.

What if the test shows a failure?

Double‑check the CNAME values for typos, ensure they are saved as CNAME (not A) records, and allow DNS propagation (usually up to 48 hours).

Do I still need a DMARC record?

If you already have a DMARC policy, keep it. Adding another DMARC record will cause conflicts because a domain can only have one.

Where can I get help with the setup?

Reach out to Palisade’s email security experts for personalized assistance.

Quick Takeaways

  • Add your domain via Settings → Verified Senders.
  • Publish two CNAME records: one for SPF, one for DKIM.
  • No need to edit your existing SPF record.
  • Optional third CNAME adds click/open tracking.
  • Validate with the Email Investigation tool.
  • DNS changes may take up to 48 hours to propagate.
  • Maintain a single DMARC record per domain.

Additional FAQs

  • What is SPF? SPF (Sender Policy Framework) tells receiving servers which IPs are allowed to send mail for your domain.
  • What is DKIM? DKIM adds a digital signature to each email, proving it hasn’t been altered in transit.
  • How does Palisade help with SPF? Use our SPF checker to verify alignment.
  • How does Palisade help with DKIM? Use our DKIM tool to generate and test keys.
  • Want to see your overall email health? Check your email security score in Palisade.
Email Performance Score
Improve results with AI- no technical skills required
More Knowledge Base