Setting up SPF and DKIM for your domain

With SPF and DKIM, you show other mail servers that emails from SpinOffice really come from you. Without these settings, your emails are more likely to end up in spam or be rejected. And without SPF, you can only send 100 emails per month with mass mailings.

• SPF is a list of servers that may send email on behalf of your domain.
• DKIM is a digital signature on every email. The recipient checks it with a key in your DNS.

You set this up once per domain, in the DNS management of the company where your domain is registered, for example TransIP or Cloudflare. Don't have access to it? Then send this article to your IT administrator or web developer.

Step 1: setting up SPF

Add include:spf.spinoffice-crm.com to your domain's SPF record. An SPF record is a TXT record that starts with v=spf1.

You already have an SPF record

This is usually the case if you send email via Microsoft 365 or Google. Put include:spf.spinoffice-crm.com before the last part (~all or -all). For example:

v=spf1 include:spf.protection.outlook.com include:spf.spinoffice-crm.com -all

You don't have an SPF record yet

Create a new TXT record. Include your own mail provider in it too, otherwise your regular emails will no longer arrive:

Please note:

• A domain may only have one SPF record. Never create a second one, because then neither of them works.
• Do other systems also send email on behalf of your domain, such as your website or accounting software? They need to be in it too.

It can take up to 24 hours for the change to take effect.

Step 2: checking SPF

1. Go to mxtoolbox.com/spf.aspx.
2. Enter your domain name, without https:// and www, for example yourcompany.com.
3. Click SPF Record Lookup.
4. Does include:spf.spinoffice-crm.com appear in the result? Then SPF is set up correctly.

Step 3: setting up DKIM

1. In your DNS management, create these two TXT records:

   Record 1
   Type: TXT
   Name: key001._domainkey
   Value:

   v=DKIM1;h=sha256;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn66jq1ZdodxCtp0ztrWZUCOJpa62KZGHHsekKfm7wediMTSLeQKdLhwWY5L4RqWP5dMJds1Ya8dDWfQJAuILM5f5cxm+pXDJ0C6we3pWlhcN7HoNZsmkVeASH1QTq8Ji8d7ngfaOHfe+SXs4yTJWbI11Rt7nIS1syAtKn4fw/NiKW4k2xb38fpT3MoVCYLBw5STwLVxKt0YA0QiSuIQfxGgruy7ldMuXCOo9rjwL1zw/1Br9W4IWd0H/BHctaIDRCkkDK1H/YJO82txnmLKYrASZbxzEQu+9rMdENNTMNJ5Ox6ptx0xN/sCTcRxkGugyoFeMB6o8BOZ7pDyY3b4CiQIDAQAB

   Record 2
   Type: TXT
   Name: key002._domainkey
   Value:

   v=DKIM1;h=sha256;k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCn1BbTAaEqGdv68mJsGTXw5n0dB/SxOj6VIrlNn06mEYvWrvhh+vFns8MReDFrvkqcVkKy/jvf5DaMph+qhzHxL0EiCrKCQOPKDPYEfFgsU+g8T7auyCzYUAxaas4K/Zffp81emUX8mmKzoVbe5kcvYqp7cF1NSLXVFV9meSGD8QIDAQAB

2. Copy the values exactly, on one line, without extra spaces or line breaks.
3. Leave the TTL at the default value and save.
4. Email support@spinoffice-crm.com to tell us which domain you've set up DKIM for. We then turn on DKIM on our side. After that, all your emails via SpinOffice are signed automatically.

Step 4: checking DKIM

1. Go to mxtoolbox.com/dkim.aspx.
2. Enter your domain name and key001 as the selector.
3. Do you get a green result? Then the record has been found. Do the same for key002.

Not working?

Getting 'DKIM = did not pass' or 'DKIM_PermError'? Then check:

• whether the value is exactly right, with no missing or extra characters;
• whether it contains spaces or line breaks, which often appear when copying and pasting;
• whether the change is already active, which can take a few hours.

Still not working? Email support@spinoffice-crm.com with your domain name, a screenshot of your DNS settings and the error message.