DMARC for marketing platforms
How do I set up DMARC for Mailchimp?
Mailchimp domain authentication asks for two DKIM CNAME records and a DMARC TXT record. Its setup article asks for no SPF change, so DKIM is the path to plan your alignment on.
The DNS records for Mailchimp
SPF: Not part of Mailchimp's domain authentication article
No SPF value to copy for this platformThe article does not ask for an SPF record or include. Do not add one because an older guide suggests it; check your DMARC reports for what actually aligns.
DKIM selector: k2 (the example in Mailchimp's article); the rest are shown in your account
k2._domainkey CNAME (value shown in your Mailchimp account)
second CNAME (name and value shown in your Mailchimp account)Mailchimp shows both as Name (Host) and Value in the account. Its article warns about hosts doubled up as k2._domainkey.example.com.example.com when a DNS provider appends the domain.
DMARC
_dmarc TXT (value shown in your account, if you have no record yet)Values in angle brackets are specific to your account. Copy the real ones from Mailchimp rather than from this page.
Alignment caveats
- ✓Because no SPF step is asked for, treat DKIM as the aligned result you depend on and confirm it in your reports.
- ✓If you already publish a DMARC record, keep that single record. A domain can only have one.
From p=none to p=reject with Mailchimp
- Publish
v=DMARC1; p=none; rua=mailto:<your-business-id>@mail.yourdmarc.online, or build it with the DMARC generator. Delivery does not change at this stage. - Add the records above, then verify them with the SPF checker and the DKIM checker, entering your selector.
- Confirm that campaigns show an aligned DKIM pass for your domain. If Mailchimp mail passes only on its own domain, it will fail at p=reject.
- Move to
p=quarantinewhen your legitimate mail passes, and watch the reports for anything you missed. - Move to
p=rejectwithsp=reject. Read the enforcement guide for what tends to break, and keep monitoring afterwards.
Sources
Taken from Mailchimp's own documentation, checked on 1 November 2026. Providers change these, so their setup screen wins over this page.
See how Mailchimp really does on your domain
Check a real message against the Gmail, Yahoo and Outlook.com sender rules, or test whether a stranger can send mail as your domain. Both are free.
Frequently asked questions
What SPF record does Mailchimp need?
Not part of Mailchimp's domain authentication article. The article does not ask for an SPF record or include. Do not add one because an older guide suggests it; check your DMARC reports for what actually aligns.
What DKIM selector does Mailchimp use?
k2 (the example in Mailchimp's article); the rest are shown in your account. Mailchimp shows both as Name (Host) and Value in the account. Its article warns about hosts doubled up as k2._domainkey.example.com.example.com when a DNS provider appends the domain.
Will Mailchimp mail pass DMARC alignment?
Only once a passing SPF or DKIM result is on your From domain or its organizational domain. Because no SPF step is asked for, treat DKIM as the aligned result you depend on and confirm it in your reports.
How do I reach p=reject with Mailchimp?
Start at p=none with a rua address, finish the Mailchimp setup, then read your reports. Confirm that campaigns show an aligned DKIM pass for your domain. If Mailchimp mail passes only on its own domain, it will fail at p=reject. Move to p=quarantine, then p=reject, once your legitimate mail passes.
As a global team, we’re always available. Let’s talk!
© 2026 yourDMARC
Download to read the eBook
