Brevo - SPF & DKIM Configuration

Brevo is an email marketing and automation platform. To ensure your emails are delivered successfully, you must first authenticate your domain by setting up SPF and DKIM.

Start by navigating to the Domains page. To get there:

• Click the gear icon in the top-right corner of the screen

• Select Senders & IP

• Click on Domains




On the Domains page, locate or add the domain you want to authenticate, then click Authenticate.

After clicking the Authenticate button, Brevo will provide several methods to authenticate your domain. We recommend choosing the manual option to avoid potential issues with the automated setup.

Once selected, you’ll be provided with the DNS records that need to be published in your domain’s DNS zone.

• The first record is the Brevo code, used only for domain verification. You need to add this TXT record to your DNS to verify your domain.
• The second and third records are DKIM records, which must also be added to your DNS.
• The last record is a DMARC record. If you already have an existing DMARC record, there is no need to add this one, as each domain should have only one DMARC record.

Brevo – SPF Record Configuration

Important: There is no need to set up an SPF record for Brevo, as SPF alignment is not supported due to how Brevo handles the “Envelope From” domain. This domain is managed by Brevo’s servers and does not match your “From” address domain.

For SPF alignment to pass, the “From” address domain must match the “Envelope From” domain. However, Brevo uses domains such as af.d.mailin.fr and kh.d.sender-sib.com, which differ from your domain. As a result, SPF alignment will fail during DMARC checks. This is common behavior across many Email Service Providers, and even if you add Brevo to your SPF record, SPF alignment will still not pass for Brevo emails.

If you choose to include Brevo in your SPF record (include:spf.sendinblue.com), it may look like this:

v=spf1 include:zoho.com include:spf.sendinblue.com ~all

It’s worth mentioning that DMARC requires either SPF or DKIM to be authenticated and aligned. As long as DKIM is properly configured, your emails will pass DMARC checks even without SPF.

Brevo – DKIM Record Configuration

Brevo provides two DKIM CNAME records that you need to publish in your domain’s DNS zone.

Once you have published the DNS records, return to your Brevo account and click the Authenticate this email domain button. If everything is configured correctly, a green checkmark will appear next to the value fields for the DKIM records.

You can test the emails with our Email Deliverability Test tool.