← All guides

Authenticate HubSpot for your domain

When HubSpot sends mail as your domain, receivers check that it is DKIM-signed or SPF-authorized for that domain. Without it, a strict DMARC policy will send that mail to spam or bounce it.

1. Set up HubSpot

In HubSpot, open Settings → Domains & URLs → Email Sending Domains and connect your domain; publish the CNAME records it provides.

2. Publish a DMARC record (if you don't have one)

Create a TXT record named _dmarc with a monitoring-only policy:

v=DMARC1; p=none; rua=mailto:<your report address>

Reports show whether HubSpot and your other services pass. Tighten the policy only when they all do.

3. Check it

Need help adding the records? See how at Cloudflare, GoDaddy, Namecheap, Amazon Route 53, Squarespace Domains, Porkbun. Add them where your domain's nameservers point.

DNS changes usually appear within an hour. Then check your domain.

Steps are typical; menus change. If something doesn't match, check HubSpot's own help pages.