Other
      Back to home
      1. Knowledge Base
      2. Tips & Best Practices
      3. Other

      Email Deliverability

      In this article you'll learn how to authenticate your domain name for email sending

      1. Authenticate your domain in Shopify

      Start by authenticating your domain in Shopify for email sending.

      For more info, see this Shopify support article

      2. Create an SPF DNS record

      In this recording, we show how to configure SPF assuming that the only services in use are Google Workspace (Gmail) and Gorgias (which uses a service called Mailgun to send email).

      This is the SPF record in the recording:

      Type: TXT
      Host: @
      Content: v=spf1 include:_spf.google.com include:mailgun.org ~all

      Note that you may be using other services that need SPF authentication; if so, each of their sending domains needed to be listed within your single SPF record. For example, if your scenario included using Recharge to send subscription-related transactional emails, your SPF record would need to contain the following in addition: include:email.rechargeapps.com, which would mean your final record should look like this:

      DNS Record Type: TXT
      Host: @
      Content: v=spf1 include:_spf.google.com include:mailgun.org include:email.rechargeapps.com ~all

      To make sure that your SPF record is all-encompassing, check with each of your third party services to see if they need to be included in your SPF record.

      Here's Google's support article on SPF records.

      3. Create DKIM records

      Next, create a DKIM record for those email sending services that require this, starting with Google Workspace as pictured in this video:

      Here's the example record created in the video:

      DNS Record Type: TXT
      Host: google._domainkey
      Content: VALUE GENERATED BY SENDING SERVICE

      Important note: Unlike SPF and DMARC records, DKIM records are configured per sending service. Some services are able to set their own DKIM records once you've configured them properly. Check with each third party service you're using that sends emails on your behalf to see how to authenticate -- some of them may need you to create an additional DKIM record.

      Here's some more info on setting up DKIM for Google Workspace.

      4. Create a DMARC record

      Once you've verified that SPF and DKIM records are in place, create your DMARC record.

      Here's the basic DMARC record created in the video:

      DNS Record Type: TXT
      Host: _dmarc
      Content: v=DMARC1; p=none

      Note: Google recommends rolling out in a sequence of steps; this is just the very first one. Be sure to check with an email deliverability expert for whether, how and when you should adjust your DMARC record and/or other changes to email authentication.