When you email your supporters through Kindful, you can use a custom sender address from your organization's domain. For example, if your organization owns the domain example.org, you might email supporters from an address such as [email protected].
Before Kindful can send emails on behalf of your organization's custom domain, you must configure email authentication. Authentication is how your organization proves your emails come from your domain and are not fraudulent. Email authentication helps protect your organization and supporters from phishing and spoofing, and it also helps reduce spam.
You must set up three types of required email authentication:
Sender Policy Framework (SPF)
DomainKeys Identified Mail (DKIM)
DMARC
This is a technical task, which means you might need help from your IT support provider. In this article, we’ll help get you started.
Note: This article applies only if your organization uses a sender address from your organization's domain in Kindful.
In this article:
About SPF and DKIM
Sender Policy Framework (SPF) tells email service providers which servers are allowed to send email for your domain.
DomainKeys Identified Mail (DKIM) adds a cryptographic key (a digital signature) to your emails. The key tells mailbox providers that the server for your domain generated the email.
SPF and DKIM have these benefits:
Supporters are more likely to receive your emails. When your domain uses SPF and DKIM, your email reputation score is more likely to be high. This means that email service providers that your supporters use are more likely to deliver your email.
You protect your organization and supporters. It’s less likely that scammers can impersonate your domain name and organization.
If you don’t set up email authentication, your supporters might not receive your emails. As your email reputation score decreases, mailbox providers might mark your emails as spam, or even bounce or block them.
SPF and DKIM work together with DMARC, another required email authentication method. When you set up SPF, DKIM, and DMARC, mailbox providers know that Kindful, and our email provider Mandrill, are authorized to send emails on your behalf and the email is legitimate.
Google and Yahoo Requirements for Bulk Senders
As of February 1, 2024, Google and Yahoo require bulk senders to follow requirements meant to increase email security and reduce spam. To comply, your organization must set up both SPF and DKIM. Other email service providers might have similar requirements. If you previously set up SPF and DKIM, you don’t need to change those records to comply with these requirements.
Google and Yahoo also have other requirements for bulk senders, including DMARC and the spam complaint rate.
For detailed information, read Google and Yahoo Requirements.
Set Up SPF and DKIM
Setting up SPF and DKIM are technical tasks that require you to edit the DNS settings for your organization's domain.
Important: Keep in mind you must configure these settings on your own outside of Kindful. Only you can log in to your domain provider account to make these changes. If you’re not comfortable editing your organization's domain settings, ask your domain provider or IT support provider for help.
Step 1: Send an Email
Send an email message to a test site that checks for email deliverability issues. We recommend https://www.mail-tester.com.
Make sure to send the test email from your usual email tool, not from Kindful. We recommend that you use an email address from your organization's domain rather than a personal email address.
Go to https://www.mail-tester.com.
Copy the email address that appears. Keep this page open.
Open your preferred email tool and create a new email message.
In the email message, paste the email address that you copied from mail-tester.com into the To field.
Send the email.
Go back to the https://www.mail-tester.com page and click Then Check Your Score.
In the results, look for a section that mentions the sender email addresses. If this section has a red number, expand the section.
In the Sender ID section, copy the suggested SPF record. You’ll use this record in Step 3.
Step 2: Find Your Domain Name Provider
You need to know who your domain name provider is to edit the SPF record. You’ll need login info, too. If you already know this information, go to Step 3: Add an SPF Record.
Enter your domain name.
Click DNS Lookup. Your domain name provider (DNS hosting provider) appears. Note this information because you’ll use it in
Step 3: Add an SPF Record
Set up your SPF record with a special include statement to allow Mandrill, our mass email provider, to send mass email on your behalf.
Note: The steps you take to update SPF records depend on your domain name provider. To help you get started, we provide general instructions. For detailed instructions, go to https://www.mail-tester.com/spf/ and select your domain name provider.
To add or edit an SPF record:
Log in to your domain provider account.
Open the page where you manage domains and DNS settings.
Find the SPF TXT record for your domain.
If you don’t have an SPF TXT record, create one. Create a new SPF record only if one doesn't already exist.
If you’re editing an existing SPF record:
Add the following to the Value field:
include: spf.mandrillapp.comIf Step 1 showed you needed a sender ID, add that to the Value field as well:
If you’re adding a new SPF record:
Enter the following in the Value field:
v=spf1 include: spf.mandrillapp.com ~allIf Step 1 showed you needed a sender ID, add the sender ID to the Value field as well:
v=spf1 [Sender ID value] include: spf.mandrillapp.com ~all
Verify that the final SPF record looks like this:
Note: Your SPF record might contain otherincludestatements, which is ok.Save the record.
Wait 24 hours before you test sending an email. These changes need time to spread across the internet.
Step 4: Add a DKIM Record
DKIM records include the cryptographic key used to sign your outbound emails. DKIM records are part of the DNS records in your domain settings.
To add the record, you must log in to your domain provider account, which only you can do. Kindful cannot add the DKIM record for you.
Note: The steps you take to update DNS records depend on your domain provider. To help you get started, we provide general instructions. For detailed instructions, search for DNS management information from your domain account provider. For example, Wordpress, Wix, and Squarespace provide instructions:
To add DKIM records:
Log in to your domain name provider account.
Open the DNS manager.
Add a new CNAME record.
In the CNAME record, add the following:
Host — mte1._domainkey.example.com (replace example.org with your domain name)
Value — dkim1.mandrillapp.com
Add the host and value information exactly. Do not include any extra spaces or characters.
Add a second CNAME record and enter the following:
Host — mte2._domainkey.example.com (replace example.org with your domain name)
Value — dkim2.mandrillapp.com
After you add both CNAME records, email [email protected] so we can verify it’s correct in Mandrill.
Step 5: Test Email Delivery
Before you send your next bulk email, make sure your emails will be delivered:
Go to https://www.mail-tester.com and copy the email address.
In Kindful, go to Add New > Contact. In the settings for that contact, paste the email address you copied from mail-tester.com.
In Kindful, go to Add New > Transaction and create a new transaction. Select the new contact you added in the previous step.
Go back to https://www.mail-tester.com and click Then Check Your Score.
Next Steps: DMARC and Spam Rate
Other factors besides SPF and DKIM affect your email reputation score and email deliverability.
You must also:
Set up DMARC if you email more than 5,000 addresses on a given day, and you use a sender address from your organization's domain in Kindful. For more information, read Set Up DMARC.
Monitor your spam complaint rate. Keep your spam complaint rate below 0.3% (three or fewer spam complaints for every 1,000 sent emails). For more information, read Monitor Your Spam Complaint Rate.