--- title: "Setting SPF and DKIM for Salesforce | AutoSPF" description: "When using an external email sender, like Salesforce, to send emails from addresses within your domain, it’s crucial to set up SPF and DKIM." image: "https://autospf.com/og/blog/setting-spf-and-dkim-for-salesforce.png" canonical: "https://autospf.com/blog/setting-spf-and-dkim-for-salesforce/" --- Quick Answer When using an external email sender, like Salesforce, to send emails from addresses within your domain, it’s crucial to set up SPF and DKIM. Without these configurations, recipients’ inboxes may flag the emails as potential spoofing attempts. The impact varies: some corporate email servers automatically delete such emails, while others redirect them to the spam folder. ## Try Our Free DKIM Lookup Auto-discover DKIM selectors for any domain. [ Discover DKIM Selectors → ](/tools/dkim-lookup/) Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fautospf.com%2Fblog%2Fsetting-spf-and-dkim-for-salesforce%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Setting%20SPF%20and%20DKIM%20for%20Salesforce&url=https%3A%2F%2Fautospf.com%2Fblog%2Fsetting-spf-and-dkim-for-salesforce%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fautospf.com%2Fblog%2Fsetting-spf-and-dkim-for-salesforce%2F "Share on Facebook") [ ](https://reddit.com/submit?url=https%3A%2F%2Fautospf.com%2Fblog%2Fsetting-spf-and-dkim-for-salesforce%2F&title=Setting%20SPF%20and%20DKIM%20for%20Salesforce "Share on Reddit") [ ](mailto:?subject=Setting%20SPF%20and%20DKIM%20for%20Salesforce&body=Check out this article: https%3A%2F%2Fautospf.com%2Fblog%2Fsetting-spf-and-dkim-for-salesforce%2F "Share via Email") ![Setting SPF and DKIM for Salesforce](https://media.mailhop.org/autospf/images/2024/06/spf-record-checker-2587.jpg) When using an external email sender, like [Salesforce](https://www.salesforce.com/?ir=1), to send emails from addresses within your domain, it’s crucial to set up SPF and DKIM. Without these configurations, recipients’ inboxes may flag the emails as potential [spoofing attempts](https://techcrunch.com/2024/06/18/security-bug-allows-anyone-to-spoof-microsoft-employee-emails/). _The impact varies: some corporate email servers automatically delete such emails, while others redirect them to the spam folder._ _DKIM ([RFC 6376](https://datatracker.ietf.org/doc/html/rfc6376)) signs email messages cryptographically, and unlike SPF, the signature survives email forwarding - which is why DMARC alignment via DKIM is more reliable than SPF alignment for forwarded mail and mailing lists._ ## SPF Record for Salesforce By default, Salesforce uses its own domain in the ‘[Return-Path’ address](https://bird.com/guides/return-path-explained), triggering DMARC to fail with respect to SPF. This disables the ‘Bounce Management’ and ‘Email Security Compliance’ from your Salesforce admin console. _Please note that if you disable [Bounce Management](https://maileroo.com/blog/email-bounce-management/), then Salesforce will stop handling your bounced addresses automatically_. Rather, you will receive all the bounces or failed email deliveries to your address. Here’s how to set up [SPF](/blog/what-is-spf-email-a-guide-to-sender-validation-technology/) for Salesforce- - Step 1: Click on Setup > Email Administration > Deliverability. - Step 2: Unselect the checkbox that reads ‘Activate Bounce Management.’ - Step 3: Unselect the checkbox that reads ‘Enable compliance with standard email security mechanisms.’ - Step 4: Click ‘Save.’ - Step 5: Add Salesforce SPF mechanism “include:\_spf.salesforce.com” to your [SPF Record](/spf-record-checker/create-spf-record/). - Step 6: Log in to your domain provider’s platform and update the DNS TXT record for SPF. Ensure there is only one SPF record corresponding to your domain; the existence of multiple records invalidates all of them, jeopardizing your [domain’s security](https://get.gov/domains/security/). _Do include all the IPs, ESPs, and third-party vendors’ sending sources in a single record_. If you spot multiple records, merge them into one, as shown [here](/blog/merge-spf-records-to-fix-multiple-spf-records-error/). ## DKIM Record for Salesforce Here’s how to set up [DKIM](/10-reasons-for-regular-spf-record-checks-in-cybersecurity/dkim-record-check/) for Salesforce- - Step 1: Click on Setup > Email Administration > DKIM Keys. - Step 2: Generate a new DKIM key with Salesforce. - Step 3: Click ‘Save.’ - Step 4: Go “Back to List” and click on your added selector. - Step 5: Copy the [CNAME records](https://www.ibm.com/topics/cname) and add them to your DNS. - Step 6: Once the changes are reflected, click ‘Activate.’ ![email marketing deliverability](https://media.mailhop.org/autospf/images/2024/06/spf-lookup-3.jpg) ### General DKIM-Key Best Practices _Adhering to the following best practices keeps your DKIM keys strong and less vulnerable to exploits._ - Key Length: The minimum key length should be 1024 bits, and 2048 bits and higher are even better. [Shorter keys can be cracked](https://securityboulevard.com/2024/06/l-tag-dkim-vulnerability-what-can-you-do-to-secure-your-email/) in 72 hours using simple cloud services. - Rotation: [Rotate your keys](/blog/when-should-you-rotate-your-dkim-keys/) at least twice a year so that [malicious actors](https://www.forbes.com/sites/daveywinder/2024/03/20/new-mass-gmail-rejections-will-start-in-14-days-google-says/) are not able to exploit them for long if they happen to crack them. - Expiration: _Check and ensure the signatures’ expiration period is greater than the key’s rotation period._ - Test mode: The “t=y” declaration is for testing purposes only. Experience has shown that several mail providers ignore the [DKIM signature](https://support.globalcerts.net/portal/en/kb/articles/dkim-signatures) when they detect “t=y.” This mode should be used only for a brief period during the initial DKIM ramp-up phase. - Monitoring: To further strengthen your email infrastructure, deploy [DMARC](/10-reasons-for-regular-spf-record-checks-in-cybersecurity/dmarc-record-check/) so that you can start receiving [DMARC reports](/kitterman-alternatives/). _These reports include insights into your domain’s email activities, allowing you to adjust [email authentication](/spf-too-many-dns-lookups/spf-lookup/) protocols as and when required._ ![email security](https://media.mailhop.org/autospf/images/2024/06/spf-record-syntax-2768.jpg) For any assistance, on [email security](/) setups feel free to [talk to us](/contact-us/?%5Fgl=1%2A9bngkk%2A%5Fup%2AMQ..%2A%5Fga%2AODk2NzI0NzkyLjE3MTg3MTgxNjg.%2A%5Fga%5F5J0R8M01Y5%2AMTcxODcxODE2OC4xLjAuMTcxODcxODE2OC4wLjAuMA..). ## Topics [ DKIM ](/tags/dkim/)[ email security ](/tags/email-security/)[ SPF ](/tags/spf/)[ SPF record ](/tags/spf-record/) ![Vishal Lamba](https://media.mailhop.org/autospf/images/authors/vishal-lamba.jpg) [ Vishal Lamba ](/authors/vishal-lamba/) Content Specialist Content Specialist at AutoSPF. Writes vendor-specific SPF configuration guides and troubleshooting walkthroughs. [LinkedIn Profile →](https://www.linkedin.com/in/vishal-lamba/) ## Ready to get started? Try AutoSPF free — no credit card required. [ Book a Demo ](/book-a-demo/) ## Related Articles [ Intermediate 3m 3 points to consider before setting your SPF record to -all (HardFail) May 22, 2025 ](/blog/3-points-to-consider-before-setting-your-spf-record-hardfail/)[ Intermediate 5m Are Your SPF and DKIM Identifiers Aligned? Jul 18, 2024 ](/blog/are-your-spf-and-dkim-identifiers-aligned/)[ Intermediate 6m Automated Solutions for Preventing Email Spoofing May 7, 2026 ](/blog/automated-solutions-for-preventing-email-spoofing/)[ Intermediate 7m AutoSPF Explains: The Definitive Guide to Adding an SPF Record to Cloudflare Jan 7, 2026 ](/blog/autospf-definitive-guide-adding-spf-record-cloudflare/) ```json {"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138897474","https://www.linkedin.com/company/autospf","https://x.com/autospf01","https://www.g2.com/products/autospf/reviews"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://autospf.com/contact-us/"},"knowsAbout":["SPF Record Flattening","Sender Policy Framework","Email Authentication","DNS Management","DMARC","DKIM"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"AutoSPF","url":"https://autospf.com","description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","publisher":{"@type":"Organization","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"Setting SPF and DKIM for Salesforce","description":"When using an external email sender, like Salesforce, to send emails from addresses within your domain, it’s crucial to set up SPF and DKIM.","url":"https://autospf.com/blog/setting-spf-and-dkim-for-salesforce/","datePublished":"2024-06-19T18:12:01.000Z","dateModified":"2026-04-18T02:36:41.000Z","dateCreated":"2024-06-19T18:12:01.000Z","author":{"@type":"Person","@id":"https://autospf.com/authors/vishal-lamba/#person","name":"Vishal Lamba","url":"https://autospf.com/authors/vishal-lamba/","jobTitle":"Content Specialist","description":"Vishal Lamba writes AutoSPF's how-to guides and vendor-specific configuration walkthroughs. His work focuses on step-by-step implementation guides for major email platforms (Google Workspace, Microsoft 365, SendGrid, Mimecast, Proofpoint, Brevo, and others), troubleshooting common SPF errors, and translating RFC-level specifications into practical deployment procedures for IT administrators.","image":"https://media.mailhop.org/autospf/images/authors/vishal-lamba.jpg","knowsAbout":["SPF Vendor Configuration","Email Platform Integrations","SPF Troubleshooting","Technical Documentation","Step-by-Step Guides"],"worksFor":{"@type":"Organization","name":"AutoSPF","url":"https://autospf.com"},"sameAs":["https://www.linkedin.com/in/vishal-lamba/"]},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138897474","https://www.linkedin.com/company/autospf","https://x.com/autospf01","https://www.g2.com/products/autospf/reviews"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://autospf.com/contact-us/"},"knowsAbout":["SPF Record Flattening","Sender Policy Framework","Email Authentication","DNS Management","DMARC","DKIM"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://autospf.com/blog/setting-spf-and-dkim-for-salesforce/"},"articleSection":"intermediate","keywords":"DKIM, email security, SPF, SPF record","wordCount":501,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/autospf/images/2024/06/spf-record-checker-2587.jpg","caption":"Setting SPF and DKIM for Salesforce","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://autospf.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://autospf.com/blog/"},{"@type":"ListItem","position":3,"name":"Intermediate","item":"https://autospf.com/intermediate/"},{"@type":"ListItem","position":4,"name":"Setting SPF and DKIM for Salesforce","item":"https://autospf.com/blog/setting-spf-and-dkim-for-salesforce/"}]} ```