DMARC for marketing platforms
How do I set up DMARC for Brevo?
Brevo authenticates a domain with a Brevo code TXT record, DKIM and a DMARC record. Copy the exact DKIM records from your account, because the form depends on the setup.
The DNS records for Brevo
SPF: Not required to authenticate a domain
No SPF value to copy for this platformBrevo says SPF and MX records are not required for authentication and are provided only with a dedicated IP. Plan your alignment on DKIM.
DKIM selector: Shown in your account (mail in Brevo's API example)
mail._domainkey TXT k=rsa;p=<public key>That is the shape in Brevo's API documentation. Its help centre says accounts get either one TXT record or two CNAME records, so copy whatever your account displays.
Brevo code
@ TXT brevo-code:<value from your account>DMARC
_dmarc TXT v=DMARC1; p=none; rua=mailto:<you>@example.comValues in angle brackets are specific to your account. Copy the real ones from Brevo rather than from this page.
Alignment caveats
- ✓If you already have a DMARC record, edit it rather than adding a second, as Brevo's help centre also says.
- ✓If a DKIM record already exists at that name, replace it only if you no longer use the service that needed it. Otherwise ask Brevo support for a new value.
- ✓Brevo is gradually rolling out a new setup that adds a branded-subdomain CNAME for SPF alignment, so your account may show different records from those above.
From p=none to p=reject with Brevo
- Publish
v=DMARC1; p=none; rua=mailto:<your-business-id>@mail.yourdmarc.online, or build it with the DMARC generator. Delivery does not change at this stage. - Add the records above, then verify them with the SPF checker and the DKIM checker, entering your selector.
- Wait until Brevo shows the domain as Authenticated, then check for an aligned DKIM pass in your reports before tightening the policy.
- Move to
p=quarantinewhen your legitimate mail passes, and watch the reports for anything you missed. - Move to
p=rejectwithsp=reject. Read the enforcement guide for what tends to break, and keep monitoring afterwards.
Sources
Taken from Brevo's own documentation, checked on 1 November 2026. Providers change these, so their setup screen wins over this page.
See how Brevo really does on your domain
Check a real message against the Gmail, Yahoo and Outlook.com sender rules, or test whether a stranger can send mail as your domain. Both are free.
Frequently asked questions
What SPF record does Brevo need?
Not required to authenticate a domain. Brevo says SPF and MX records are not required for authentication and are provided only with a dedicated IP. Plan your alignment on DKIM.
What DKIM selector does Brevo use?
Shown in your account (mail in Brevo's API example). That is the shape in Brevo's API documentation. Its help centre says accounts get either one TXT record or two CNAME records, so copy whatever your account displays.
Will Brevo mail pass DMARC alignment?
Only once a passing SPF or DKIM result is on your From domain or its organizational domain. If you already have a DMARC record, edit it rather than adding a second, as Brevo's help centre also says.
How do I reach p=reject with Brevo?
Start at p=none with a rua address, finish the Brevo setup, then read your reports. Wait until Brevo shows the domain as Authenticated, then check for an aligned DKIM pass in your reports before tightening the policy. Move to p=quarantine, then p=reject, once your legitimate mail passes.
As a global team, we’re always available. Let’s talk!
© 2026 yourDMARC
Download to read the eBook
