SPF and DKIM for Mailchimp

Mailchimp does not need an SPF include. Mailchimp no longer needs an SPF include: it uses its own return-path domain. DMARC alignment comes from DKIM. Check your domain below once the records are in.

  • Free
  • No Sign-Up
  • Live Lookup

Examples:

SPF Checker

Mailchimp records

SPF IncludeNone needed
SPF Record (on Its Own)No SPF include needed
With Another ProviderLeave your SPF as it is
DKIM Selectorsk2, k3 (CNAME)
Starter DMARC (_dmarc)v=DMARC1; p=none; rua=mailto:[email protected]

Mailchimp no longer needs an SPF include: it uses its own return-path domain. DMARC alignment comes from DKIM.

DKIM: CNAME records at k2._domainkey and k3._domainkey pointing at dkim2.mcsv.net and dkim3.mcsv.net.

A domain can have only one SPF record. If you already send through another service, add the include to your existing record rather than creating a second one, and keep the total under 10 DNS lookups.

Once SPF and DKIM pass, add a DMARC record at _dmarc with p=none and a reporting address, read the reports for a couple of weeks, then move to quarantine and reject.

Questions

What is the SPF record for Mailchimp?
Mailchimp no longer needs an SPF include: it uses its own return-path domain. DMARC alignment comes from DKIM.
Where do I find the DKIM record for Mailchimp?
CNAME records at k2._domainkey and k3._domainkey pointing at dkim2.mcsv.net and dkim3.mcsv.net.
Do I need DMARC with Mailchimp?
Yes. Gmail and Yahoo require DMARC for bulk senders, and it is what stops others sending as your domain. Start with p=none and move to reject.
How long do new SPF and DKIM records take to work?
As soon as resolvers see them, usually within minutes; at most the old record's TTL. Use the checker above to confirm.

Your customers' VMs sending spam?

Frabs spots outbound spam from any VM within seconds and stops it, before your IPs end up on a blocklist.