SPF, DKIM and DMARC for Brevo

Short answer: Brevo mail passes Gmail, Yahoo and Microsoft checks when you turn on DKIM with your own domain and publish a DMARC record at _dmarc (start with p=none). The exact records and clicks are below.

SPF—Not needed for Brevo's domain authentication: Brevo sends with its own return-path, so your DMARC passes through DKIM.
DKIMCNAME / TXTTwo CNAME records: brevo1._domainkey → b1.yourdomain-com.dkim.brevo.com and brevo2._domainkey → b2.yourdomain-com.dkim.brevo.com (the dots in your domain become dashes), plus a TXT brevo-code:… at @ that proves you own the domain.
DMARCTXT at _dmarc
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com
Start with p=none and a mailbox you read, or a free report address that turns the reports into a dashboard; build your own.

Step by step

  1. In Brevo open Senders, Domains & Dedicated IPs → Domains and add your domain.
  2. Let Brevo add the records for you (log in to your DNS provider from Brevo), or add them yourself.
  3. Manual: the brevo-code TXT at @, the two DKIM CNAMEs and a DMARC record at _dmarc.
  4. Click Authenticate. You can re-check for up to 48 hours while DNS updates.

Mistakes that break it

Check that it worked

After the fix, keep an eye on it: free DMARC monitoring shows every service that sends mail as your domain and which ones fail, in plain English.

Rather not touch DNS? I set up SPF, DKIM and DMARC without breaking your other senders, with a before/after report.

Get it fixed on Fiverr

Prefer to do it yourself? Get the step-by-step Fix Kit ($15) – 19-page guide, checklist, 20+ providers.

Other setup guides

Google Workspace · Microsoft 365 · Zoho Mail · Hostinger Email · Titan Email · GoDaddy email (Microsoft 365 and Professional Email) · Proton Mail · Cloudflare Email Routing · Mailchimp · SendGrid · Amazon SES · Shopify Email · Klaviyo · HubSpot · Mailgun · Postmark · Zendesk · Constant Contact · MailerLite · Kit (ConvertKit)