NevarMail

Set up SPF, DKIM and DMARC for your domain

Why mailbox providers need your domain verified, what records to add, and how to tell when it has worked.

Domains in NevarMail represent the sending domains you use for email delivery. Proper domain configuration ensures high deliverability and protects your sender reputation.

Why domain verification matters

Email providers and receiving mail servers use DNS records to verify that you are authorized to send email from a domain. Without proper configuration, your emails are more likely to be flagged as spam or rejected entirely.

NevarMail automates the setup of three critical DNS record types:

RecordPurpose
SPFSpecifies which mail servers are authorized to send email for your domain
DKIMAdds a cryptographic signature to verify message integrity
DMARCTells receiving servers what to do when SPF or DKIM checks fail

Add a domain

Navigate to the Domains page in the dashboard and add your sending domain. NevarMail will:

  1. Register the domain with your connected provider
  2. Fetch the exact DNS records that provider requires for this domain, live from the provider's own API
  3. Monitor verification status automatically

DNS record setup

After adding a domain, NevarMail shows you the exact DNS records to add to your domain's DNS configuration. These records are retrieved live from your provider at add-domain time -- NevarMail does not maintain its own static list of per-provider record requirements, since a provider can change what it requires. The records typically include CNAME entries for DKIM authentication and a TXT record for SPF, but the specifics come from the provider's response.

Verification status

After adding DNS records, NevarMail periodically checks verification status. Domain states include:

StatusDescription
pendingDNS records have been generated but not yet verified
verifiedAll DNS records are correctly configured
failedDNS verification failed (records may be missing or incorrect)

Best practices

  • Verify before sending -- Always wait for domain verification to complete before sending production emails
  • Use a subdomain -- Consider using a subdomain like mail.yourdomain.com for transactional email to isolate your sending reputation
  • Monitor DNS -- DNS changes can take up to 48 hours to propagate, though most complete within minutes
  • One domain per use case -- Separate marketing and transactional email onto different subdomains for better deliverability control

On this page