SPF, DKIM and DMARC for Kit (ConvertKit)

Short answer: Kit (ConvertKit) mail passes Gmail, Yahoo and Microsoft checks when you turn on DKIM with your own domain and publish a DMARC record at _dmarc (start with p=none). The exact records and clicks are below.

SPF—Not needed on your root domain: the ckespa CNAME gives Kit a return-path on your domain, so SPF passes and aligns there.
DKIMCNAME / TXTTwo CNAME records Kit shows: cka._domainkey → dkim.dm-xxxx.sgN.convertkit.com (DKIM) and ckespa → spf.dm-xxxx.sgN.convertkit.com (return path). The targets are unique to your account.
DMARCTXT at _dmarc
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com
Start with p=none and a mailbox you read, or a free report address that turns the reports into a dashboard; build your own.

Step by step

  1. In Kit click Settings → Email and add your domain under Verified Sending Domains.
  2. Try Set this up for me (automatic) first; otherwise copy the CNAME records Kit shows into your DNS.
  3. Click Validate. It usually takes a few minutes.
  4. No DMARC record yet? Add the one Kit offers (p=none) and validate it as well.

Mistakes that break it

Check that it worked

After the fix, keep an eye on it: free DMARC monitoring shows every service that sends mail as your domain and which ones fail, in plain English.

Rather not touch DNS? I set up SPF, DKIM and DMARC without breaking your other senders, with a before/after report.

Get it fixed on Fiverr

Prefer to do it yourself? Get the step-by-step Fix Kit ($15) – 19-page guide, checklist, 20+ providers.

Other setup guides

Google Workspace · Microsoft 365 · Zoho Mail · Hostinger Email · Titan Email · GoDaddy email (Microsoft 365 and Professional Email) · Namecheap Private Email · IONOS Mail · Proton Mail · Cloudflare Email Routing · Mailchimp · SendGrid · Amazon SES · Shopify Email · Klaviyo · HubSpot · Brevo · Mailgun · Postmark · Zendesk · Constant Contact · MailerLite · ActiveCampaign · Freshdesk · Intercom · Zoho Campaigns