How to set up DMARC for Mailchimp

What it is

Mailchimp sends your campaigns from its own infrastructure. Its domain authentication publishes CNAME records that let Mailchimp DKIM-sign your mail aligned to your own domain — which is what lets those campaigns pass DMARC.

You don't normally add Mailchimp to your root SPF; Mailchimp manages its own return-path, and the CNAME DKIM alignment is what satisfies DMARC for the visible From domain.

Why it matters

If you publish DMARC at enforcement without authenticating Mailchimp, your campaigns can be quarantined or rejected — a common way to accidentally block your own marketing email.

Authenticating Mailchimp with your domain also improves deliverability and lets recipients see mail genuinely from your brand, not a Mailchimp sending domain.

How to set it up

1. 1In Mailchimp, verify your sending domain (Website → Domains, or the Verified domains area), then choose to authenticate/connect the domain.
2. 2Mailchimp shows a set of CNAME records — publish them exactly as given in your DNS. These are the DKIM records that align signing to your domain.
3. 3Confirm Mailchimp shows the domain as authenticated (all records validated).
4. 4DMARC: publish a TXT record at _dmarc.yourdomain.com: v=DMARC1; p=none; rua=mailto:you@yourdomain.com. Once your Mailchimp campaigns (and every other sender) pass, raise the policy to p=quarantine and p=reject.

Common problems

Do I need to add Mailchimp to my SPF record?

Generally no. Mailchimp's domain authentication uses CNAME-based DKIM aligned to your domain, which is what DMARC needs — the return-path/SPF is handled on Mailchimp's side. Follow whatever Mailchimp's authentication screen tells you and don't add duplicate SPF entries.

My Mailchimp campaigns fail DMARC.

Almost always because domain authentication isn't completed — the CNAME records aren't published or haven't validated. Re-check that Mailchimp shows the domain as authenticated, then confirm with a DMARC report.

How do I verify it's working?

Send a campaign, then check a DMARC aggregate report for the Mailchimp source — it should show DKIM aligned. Our free report analyzer breaks this down by sender so you can confirm at a glance.

More guides