--- title: "How to Configure SPF and DKIM for Resend | AutoSPF" description: "Learn how to configure SPF and DKIM for Resend, verify DNS records, troubleshoot authentication issues, and improve email deliverability and domain security." image: "https://autospf.com/og/blog/how-to-configure-spf-and-dkim-for-resend.png" canonical: "https://autospf.com/blog/how-to-configure-spf-and-dkim-for-resend/" --- Quick Answer To configure SPF and DKIM for Resend, add the DNS records provided in your Resend dashboard, update existing SPF policies if needed, publish DKIM records, and verify authentication. Test emails to confirm SPF, DKIM, and DMARC pass and improve email deliverability. ## Try Our Free DKIM Lookup Auto-discover DKIM selectors for any domain. [ Discover DKIM Selectors → ](/tools/dkim-lookup/) Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fautospf.com%2Fblog%2Fhow-to-configure-spf-and-dkim-for-resend%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=How%20to%20Configure%20SPF%20and%20DKIM%20for%20Resend&url=https%3A%2F%2Fautospf.com%2Fblog%2Fhow-to-configure-spf-and-dkim-for-resend%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fautospf.com%2Fblog%2Fhow-to-configure-spf-and-dkim-for-resend%2F "Share on Facebook") [ ](https://reddit.com/submit?url=https%3A%2F%2Fautospf.com%2Fblog%2Fhow-to-configure-spf-and-dkim-for-resend%2F&title=How%20to%20Configure%20SPF%20and%20DKIM%20for%20Resend "Share on Reddit") [ ](mailto:?subject=How%20to%20Configure%20SPF%20and%20DKIM%20for%20Resend&body=Check out this article: https%3A%2F%2Fautospf.com%2Fblog%2Fhow-to-configure-spf-and-dkim-for-resend%2F "Share via Email") ![Configuring SPF and DKIM for Resend](https://media.mailhop.org/autospf/spf-lookup-6207-1793864229017.jpg) ## Why SPF and DKIM Matter for Resend Email Deliverability SPF and DKIM help **inbox providers** such as Google, Microsoft, and Yahoo verify that emails sent through Resend are legitimate. SPF authorizes Resend to send emails for your domain, while DKIM adds a digital signature to verify [message authenticity and integrity](https://www.ibm.com/docs/en/linux-on-systems?topic=verbs-data-integrity-message-authentication). _Together, SPF and DKIM improve email deliverability, reduce spoofing, and support DMARC enforcement through monitoring, quarantine, or reject policies._ They also help protect domain reputation and prepare your domain for [BIMI and VMC](https://www.encryptionconsulting.com/education-center/vmc-and-bimi/) requirements. Properly configuring SPF and DKIM for Resend strengthens [email security](https://autospf.com/) by preventing domain spoofing, reducing phishing risks, and **protecting your domain’s reputation** against unauthorized email activity. ## Prerequisites: Domain Access, DNS Provider, and Resend Account Setup Before configuring **SPF and DKIM** for Resend, ensure you have access to your domain’s [DNS settings](https://www.ntchosting.com/encyclopedia/dns/settings/) and permission to add or edit [TXT records](https://unstoppabledomains.com/blog/categories/education/article/txt-records). You also need an active Resend account and access to its dashboard. If you plan to send emails programmatically, keep your API Key ready. Go to the Domains tab and add your domain to generate the required DNS records for verification, SPF, DKIM, and [return-path](https://emaillabs.io/en/what-is-return-path/) alignment. Decide whether to authenticate your root domain (e.g., `example.com`) or a subdomain (e.g., `mail.example.com`). Using a subdomain helps separate transactional emails from regular business emails. _Before making changes, review existing SPF, DKIM, DMARC, MX, and TXT records to avoid configuration conflicts._ ![Spf Record Example 3208](https://media.mailhop.org/autospf/spf-record-example-3208-1793864361623.jpg) A few prerequisites to confirm: - You can edit [DNS records](https://in.micron.com/about/micron-glossary/dns-records) at your DNS Provider. - You can access the Resend Dashboard and **Domains Tab**. - You understand whether Resend will send from the root domain or a subdomain. - You can identify existing TXT record, [MX Record](https://opensrs.com/blog/what-is-an-mx-record), and DMARC entries. - You have a mailbox available for testing email delivery and reviewing [email headers](https://www.captaindns.com/en/blog/how-to-read-email-headers). Tools such as Email Labs, DmarcDkim.com, DMARC Checker, Open-SPF.org, and dkim.org can help validate **email authentication** after setup. Resend Guides are also useful when comparing the generated record value with what appears in your [DNS zone](https://www.digicert.com/blog/what-is-a-dns-zone). ## How to Configure SPF for Resend in Your DNS Records To configure SPF for Resend, publish or update a TXT record to authorize its sending servers. _Open the Domains Tab in your Resend Dashboard, select your domain, and copy the required DNS record._ If an SPF record already exists, update it instead of creating a second one to **avoid authentication failures**. ### SPF setup step-by-step 1. Log in to your DNS Provider, such as Cloudflare or [AWS Route 53](https://www.whizlabs.com/blog/amazon-route-53/). 2. Find the DNS zone for your root domain or subdomain. 3. Locate any existing TXT record beginning with `v=spf1`. 4. If no SPF record exists, create a new TXT record using the value provided by Resend. 5. If an SPF record already exists, merge Resend into the existing Sender Policy Framework policy. 6. Save the DNS records and wait for propagation. 7. Return to Resend and use verify DNS records to check **domain verification**. ![Spf Flattening 8930](https://media.mailhop.org/autospf/spf-flattening-8930-1793864404039.jpg) A typical [SPF TXT record](https://autospf.com/blog/how-to-create-an-spf-txt-record/) might look like this: ``` v=spf1 include:resend.com ~all ``` The exact record value should come from Resend because sending requirements may change. If you also send mail through [Google Workspace](https://www.uschamber.com/co/run/technology/google-workspace-for-business), Amazon SES, or another email provider, the Sender Policy Framework policy must include those authorized senders as well. _For example, a domain using Google and Amazon SES may need multiple `include` mechanisms in one SPF TXT record._ Avoid ending with `+all`, which allows almost any [mail server](https://www.activecampaign.com/glossary/mail-server) to send on behalf of your domain. A soft fail such as `~all` is often used during setup, while `-all` is stricter. Your final SPF stance should align with your **DMARC policy**, domain reputation goals, and operational risk tolerance. ## How to Configure DKIM for Resend and Verify Domain Authentication To configure DKIM in Resend, publish the required DNS records containing [public keys](https://www.investopedia.com/terms/p/public-key.asp) to authenticate outgoing emails. Open the Domains Tab in your Resend Dashboard, select your domain, and add the provided TXT or [CNAME records](https://www.cloudns.net/wiki/article/13/) exactly as displayed. ### DKIM and domain verification checks _After adding the DKIM DNS records, return to Resend and click verify DNS records._ If the DNS records are correct and propagation is complete, Resend will mark the domain as a **Verified Domain**. At that point, domain authentication should show as passing for DKIM. When testing, send a message from your application or via the Resend [API Key](https://www.fortinet.com/resources/cyberglossary/api-key) to a mailbox hosted by Google or another Inbox Provider. Open the message details and inspect the email headers. Look for: - `dkim=pass` - `spf=pass` - `dmarc=pass` once DMARC is configured - A valid [DKIM signature](https://www.emailonacid.com/blog/article/email-deliverability/what-is-dkim-everything-you-need-to-know-about-digital-signatures/) - Alignment between the visible From domain and authenticated domain - A return-path that aligns with your authenticated sending domain if configured ![Spf Record Checker 1030](https://media.mailhop.org/autospf/spf-record-checker-1030-1793864319446.jpg) [DKIM](https://autospf.com/blog/dkim-authentication-a-complete-guide-to-secure-email-deliverability/) is especially important because SPF can break when mail is forwarded. DomainKeys Identified Mail survives many forwarding scenarios because the [digital signature](https://www.geeksforgeeks.org/computer-networks/digital-signatures-certificates/) remains attached to the message. _However, DKIM can fail if a system modifies signed content, subject lines, or certain email headers after Resend signs the message._ ## Testing, Troubleshooting, and Maintaining SPF/DKIM Configuration After configuring SPF and DKIM for Resend, send test emails to major inbox providers to check delivery and verify SPF, DKIM, and DMARC alignment. Use validation tools to identify DNS errors, missing **DKIM selectors**, and DMARC issues. If DNS verification is delayed, allow time for propagation, which may take several minutes or hours depending on your DNS provider and [TTL](https://www.imperva.com/learn/performance/time-to-live-ttl/) settings. Common problems include: - Creating more than one SPF TXT record for the same hostname. - Copying the wrong DKIM record value from the Resend Dashboard. - Adding a TXT record to the root domain when Resend expects it on a subdomain. - Forgetting to include all authorized senders in Sender Policy Framework. - Publishing a DMARC reject policy too early. - Using a quarantine policy without reviewing **DMARC report data**. - Changing DNS records in Cloudflare but editing the wrong DNS zone. - Not checking return-path alignment for [transactional email](https://useinbox.com/transactional-email) delivery. Once SPF and DKIM pass, add or refine DMARC. A starter DMARC TXT record can use a monitoring policy: ``` v=DMARC1; p=none; rua=mailto:dmarc@example.com; pct=100 ``` Review DMARC reports and gradually move from `p=none` to Quarantine and then Reject, using the PCT tag to apply policies in stages. Before enabling BIMI, ensure [DMARC](https://autospf.com/blog/implementing-dmarc-gain-visibility-maintain-gdpr-compliance-right-way/) enforcement is active and your domain meets the required authentication standards to display a **verified brand logo** in supported inboxes. ![Brad Slavin](https://media.mailhop.org/autospf/images/authors/brad-slavin.jpg) [ Brad Slavin ](/authors/brad-slavin/) General Manager General Manager of DuoCircle. Product strategy and commercial lead for AutoSPF's 2,000+ customer base. [LinkedIn Profile →](https://www.linkedin.com/in/bradslavin) ## Ready to get started? Try AutoSPF free — no credit card required. [ Book a Demo ](/book-a-demo/) Scan Your Domain Now Instantly scan your domain for DKIM, SPF, and DMARC issues Check My Domain Share this article [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fautospf.com%2Fblog%2Fhow-to-configure-spf-and-dkim-for-resend%2F) [ ](https://twitter.com/intent/tweet?text=How%20to%20Configure%20SPF%20and%20DKIM%20for%20Resend&url=https%3A%2F%2Fautospf.com%2Fblog%2Fhow-to-configure-spf-and-dkim-for-resend%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fautospf.com%2Fblog%2Fhow-to-configure-spf-and-dkim-for-resend%2F) Copy Related Articles - [ ![SPF Standard](https://media.mailhop.org/autospf/images/2025/11/kitterman-spf-4236.jpg) 10 Reasons The SPF Standard Is Essential For Protecting Your Domain Foundational ](/blog/10-reasons-the-spf-standard-is-essential-for-protecting-your-domain/) - [ ![AI-based scams](https://media.mailhop.org/autospf/images/2024/08/spf-checker-2003.jpg) ChatGPT & AI Scams: 4 Types to Watch Out For Foundational ](/blog/4-ai-and-chatgpt-scams-to-watch-for-in-2024/) - [ ![BEC attacks](https://media.mailhop.org/autospf/images/2024/02/spf-record-office-365.jpg) 6 Steps to Outplay BEC Attackers Foundational ](/blog/6-steps-to-outplay-bec-attackers/) - [ ![email security](https://media.mailhop.org/autospf/images/2024/05/sender-policy-framework-office-365.jpg) 7 Myths and Misconceptions about Sender Policy Framework Foundational ](/blog/7-myths-and-misconceptions-about-sender-policy-framework/) ## Related Articles [ Foundational 17m 10 Reasons The SPF Standard Is Essential For Protecting Your Domain Nov 20, 2025 ](/blog/10-reasons-the-spf-standard-is-essential-for-protecting-your-domain/)[ Foundational 5m ChatGPT & AI Scams: 4 Types to Watch Out For Aug 16, 2024 ](/blog/4-ai-and-chatgpt-scams-to-watch-for-in-2024/)[ Foundational 6m 6 Steps to Outplay BEC Attackers Feb 2, 2024 ](/blog/6-steps-to-outplay-bec-attackers/)[ Foundational 4m 7 Myths and Misconceptions about Sender Policy Framework May 31, 2024 ](/blog/7-myths-and-misconceptions-about-sender-policy-framework/) ```json {"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138897474","https://www.linkedin.com/company/autospf","https://x.com/autospf01","https://www.g2.com/products/autospf/reviews"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://autospf.com/contact-us/"},"knowsAbout":["SPF Record Flattening","Sender Policy Framework","Email Authentication","DNS Management","DMARC","DKIM"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"AutoSPF","url":"https://autospf.com","description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","publisher":{"@type":"Organization","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"How to Configure SPF and DKIM for Resend","description":"Learn how to configure SPF and DKIM for Resend, verify DNS records, troubleshoot authentication issues, and improve email deliverability and domain security.","url":"https://autospf.com/blog/how-to-configure-spf-and-dkim-for-resend/","datePublished":"2026-11-05T00:00:00.000Z","dateModified":"2026-11-05T00:00:00.000Z","dateCreated":"2026-11-05T00:00:00.000Z","author":{"@type":"Person","@id":"https://autospf.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://autospf.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin is the General Manager of DuoCircle, the company behind AutoSPF, DMARC Report, Phish Protection, and Mailhop. He founded DuoCircle in 2014 to solve the SPF 10-DNS-lookup problem at scale and has led the company's growth to 2,000+ customers. Brad's focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement) rather than hands-on DNS engineering.","image":"https://media.mailhop.org/autospf/images/authors/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"AutoSPF","url":"https://autospf.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138897474","https://www.linkedin.com/company/autospf","https://x.com/autospf01","https://www.g2.com/products/autospf/reviews"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://autospf.com/contact-us/"},"knowsAbout":["SPF Record Flattening","Sender Policy Framework","Email Authentication","DNS Management","DMARC","DKIM"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://autospf.com/blog/how-to-configure-spf-and-dkim-for-resend/"},"articleSection":"foundational","keywords":"","image":{"@type":"ImageObject","url":"https://media.mailhop.org/autospf/spf-lookup-6207-1793864229017.jpg","caption":"Configuring SPF and DKIM for Resend"},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://autospf.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://autospf.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://autospf.com/foundational/"},{"@type":"ListItem","position":4,"name":"How to Configure SPF and DKIM for Resend","item":"https://autospf.com/blog/how-to-configure-spf-and-dkim-for-resend/"}]} ```