--- title: "The Ultimate AutoSPF Guide To Zendesk SPF & DKIM Configuration" description: "In today’s email‑centric world, ensuring that your support and outbound emails are trusted by inbox providers like Gmail, Outlook, Yahoo." image: "https://autospf.com/og/blog/the-ultimate-autospf-guide-to-zendesk-spf-and-dkim-configuration.png" canonical: "https://autospf.com/blog/the-ultimate-autospf-guide-to-zendesk-spf-and-dkim-configuration/" --- Quick Answer In today’s email‑centric world, ensuring that your support and outbound emails are trusted by inbox providers like Gmail, Outlook, Yahoo, and others is critical - not just desirable. Without proper email authentication, your messages can easily land in spam folders or be blocked outright. ## Try Our Free DKIM Lookup Auto-discover DKIM selectors for any domain. [ Discover DKIM Selectors → ](/tools/dkim-lookup/) Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fautospf.com%2Fblog%2Fthe-ultimate-autospf-guide-to-zendesk-spf-and-dkim-configuration%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=The%20Ultimate%20AutoSPF%20Guide%20To%20Zendesk%20SPF%20%26%20DKIM%20Configuration&url=https%3A%2F%2Fautospf.com%2Fblog%2Fthe-ultimate-autospf-guide-to-zendesk-spf-and-dkim-configuration%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fautospf.com%2Fblog%2Fthe-ultimate-autospf-guide-to-zendesk-spf-and-dkim-configuration%2F "Share on Facebook") [ ](https://reddit.com/submit?url=https%3A%2F%2Fautospf.com%2Fblog%2Fthe-ultimate-autospf-guide-to-zendesk-spf-and-dkim-configuration%2F&title=The%20Ultimate%20AutoSPF%20Guide%20To%20Zendesk%20SPF%20%26%20DKIM%20Configuration "Share on Reddit") [ ](mailto:?subject=The%20Ultimate%20AutoSPF%20Guide%20To%20Zendesk%20SPF%20%26%20DKIM%20Configuration&body=Check out this article: https%3A%2F%2Fautospf.com%2Fblog%2Fthe-ultimate-autospf-guide-to-zendesk-spf-and-dkim-configuration%2F "Share via Email") ![SPF & DKIM Configuration](https://media.mailhop.org/autospf/images/2026/01/spf-checker-6368.jpg) In today’s email‑centric world, ensuring that your support and outbound emails are trusted by inbox providers like Gmail, Outlook, Yahoo, and others is critical - not just desirable. Without proper email authentication, your messages can easily land in [spam folders](https://cybernews.com/news/microsofts-breach-notification-emails-end-up-in-spam-folder/) or be blocked outright. This is especially true for customer support platforms such as Zendesk, which send transactional and notification emails on your behalf. _DKIM ([RFC 6376](https://datatracker.ietf.org/doc/html/rfc6376)) signs email messages cryptographically, and unlike SPF, the signature survives email forwarding - which is why DMARC alignment via DKIM is more reliable than SPF alignment for forwarded mail and mailing lists._ At AutoSPF, we’re committed to making [email authentication](https://www.emailtooltester.com/en/blog/email-authentication/) simple, effective, and transparent. In this guide, we’ll walk you through exactly how to configure SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) for Zendesk so that your emails are properly authenticated and aligned with DMARC. By the end, you’ll understand not only how to set these records up - but why each step matters. ## Why SPF and DKIM Matter for Zendesk Emails Before we dive into the configuration steps, let’s briefly explain what these protocols do - in plain language: ### 🛡️ SPF, Sender Policy Framework _SPF tells receiving email servers which servers are allowed to send email on behalf of your domain_. If a server isn’t on that list, the email can be marked as suspicious or rejected. ### 🖋️ DKIM, DomainKeys Identified Mail DKIM adds a [cryptographic signature](https://www.syncfusion.com/succinctly-free-ebooks/cryptography-in-net-succinctly/cryptographic-signatures) to each outgoing email. This means that receivers can check whether the email was truly sent by an authorized sender and whether it was altered in transit. ### 🚦 DMARC, Domain-based Message Authentication, Reporting & Conformance DMARC ties SPF and DKIM together, specifying how email receivers should handle emails that fail authentication. While this guide focuses on SPF and DKIM, proper DMARC implementation depends on having both set up correctly. ## Part 1 - Setting Up SPF for Zendesk ### 🧱 What Does Zendesk Need from SPF? Zendesk sends support emails on your behalf, but it’s not your [mail server](https://whatismyipaddress.com/mail-server). That means you must tell the world’s email systems: Yes, Zendesk is authorized to send emails for our domain. To do that, you add Zendesk’s mail servers to your SPF record via an “include” mechanism. ![mail server](https://media.mailhop.org/autospf/images/2026/01/spf-record-generator-6389.jpg) ### 📌 Step‑by‑Step: Create or Update Your SPF Record #### 1\. Locate Your DNS Provider Log in to the service where your domain’s DNS is managed - e.g., Cloudflare, GoDaddy, AWS Route 53, Namecheap, etc. _SPF records live in DNS as a TXT record_. #### 2\. Check if You Already Have an SPF Record You may already have a [TXT record](https://www.digicert.com/faq/dns/what-is-a-txt-record) that begins with v=spf1\. If you do, you must edit that record rather than create a new one. Only one SPF TXT record is allowed per domain. Partial Multiple SPF records = permanent SPF error (PermError). #### 3\. Add Zendesk to Your SPF Record Add the following mechanism inside your SPF record: include:mail.zendesk.com Your SPF record might end up looking like: v=spf1 include:mail.zendesk.com include:other‑services.com \~all The \~all (soft fail) at the end tells receivers to accept but flag emails that don’t match your SPF. You can adjust this based on your DMARC policy, but it’s common during setup. #### 4\. Save and Publish the SPF Record After editing the TXT record, save it. [DNS propagation](https://www.ibm.com/think/topics/dns-propagation) may take from a few minutes to up to 48 hours, depending on your DNS provider. #### 5\. Go to Zendesk Admin Console Once your DNS change has propagated: - Open Zendesk → Admin → Channels → Email - Hover over Add Address → Connect External Address - Provide your support email or connect with [Google Workspace](https://en.wikipedia.org/wiki/Google%5FWorkspace)/Office 365 forwarding - _Ensure automatic forwarding is enabled for your support address_ Zendesk will then verify whether your SPF is correctly detected. ## Part 2 - Setting Up DKIM for Zendesk While SPF verifies where your emails come from, \*DKIM verifies that the message belongs to you and has not been tampered with. Correct DKIM setup is incredibly powerful for inbox deliverability. ![DNS propagation](https://media.mailhop.org/autospf/images/2026/01/spf-record-syntax-4865.jpg) ### 📌 Step‑by‑Step: Create DKIM Records #### 1\. Open Your DNS Management Console You’ll create two new [CNAME records](https://www.cloudflare.com/learning/dns/dns-records/dns-cname-record/) in your DNS zone. #### 2\. Create Record #1 - Type: CNAME - Name/Host: zendesk1.\_domainkey.yourdomain.com - Target/Value: zendesk1.\_domainkey.zendesk.com #### 3\. Create Record #2 - Type: CNAME - Name/Host: zendesk2.\_domainkey.yourdomain.com - Target/Value: zendesk2.\_domainkey.zendesk.com These dual records exist because Zendesk rotates DKIM keys for improved security. #### 4\. Enable DKIM Signing in Zendesk After publishing your CNAME records: - Go to Zendesk Admin → Channels → Email - _Locate the Custom domain for DKIM section_ - Click Enable, then Save If everything is correct, Zendesk will begin signing outgoing emails with your DKIM key. ## How to Verify That Everything Works ### ✔️ Check SPF You can use tools like: - AutoSPF’s SPF checker - DNS record lookup tools - Online SPF validators You should see your domain’s [SPF record](/spf-record-checker/create-spf-record/), including mail.zendesk.com. ### ✔️ Check DKIM Use DKIM validation tools and enter: | Selector | Domain | | -------- | -------------- | | zendesk1 | yourdomain.com | | zendesk2 | yourdomain.com | If you see a green success or “valid signature,” the DKIM records are correct. ## What Are Common Setup Issues & Troubleshooting? Even with all records in place, problems sometimes occur: ### Partial Emails Still Going to Spam If your support emails still land in spam - even after SPF and DKIM are set - consider: - Inspecting your forwarding setup (especially if using Office 365 or Gmail) - _Confirming that forwarding servers preserve DKIM signatures_ - Checking your DMARC policy - a strict p=reject with misaligned SPF/DKIM may still cause problems Community users have reported that just enabling DKIM without verifying forwarding and alignment can still cause delivery issues. ![spoofing](https://media.mailhop.org/autospf/images/2026/01/spf-flattening-4896.jpg) ## What Are Best Practices for Beyond SPF & DKIM? ### 📩 1\. Publish a DMARC Record Once your [SPF and DKIM](/blog/how-to-configure-spf-and-dkim-for-your-esp-autospf/) are reliably passing, publish a DMARC record to specify how mail receivers should react to failures. Example basic DMARC: v=DMARC1; p=quarantine; rua=mailto:dmarc‑[reports@yourdomain.com](mailto:reports@yourdomain.com); pct=100 ### 📊 2\. Monitor Daily Use report aggregation tools to understand: - How many emails pass/fail SPF/DKIM - Which IPs/services are sending - Whether someone is [spoofing](https://www.infosecurity-magazine.com/news/infosec2025-email-domains-spoofing/) your domain ### 🔄 3\. Stay Updated DNS changes can take time, and ISP rules evolve. Periodically verify: - Your SPF record doesn’t exceed [DNS lookup](/blog/spf-dns-lookup-limits-exploits-mitigations-and-best-practices/) limits - DKIM selectors haven’t rotated - _Your domain has up‑to‑date records_ ### Final Takeaway Properly configuring SPF and DKIM for Zendesk is one of the most impactful steps you can take to ensure reliable email delivery and protect your brand reputation. While the process involves DNS changes, the benefits extend across security, deliverability, and trustworthiness. At [AutoSPF](/), our goal is to empower you with the right tools and guidance to move beyond guesswork - so you can send with confidence. ## Topics [ DKIM ](/tags/dkim/)[ SPF ](/tags/spf/)[ SPF record ](/tags/spf-record/) ![Vishal Lamba](https://media.mailhop.org/autospf/images/authors/vishal-lamba.jpg) [ Vishal Lamba ](/authors/vishal-lamba/) Content Specialist Content Specialist at AutoSPF. Writes vendor-specific SPF configuration guides and troubleshooting walkthroughs. [LinkedIn Profile →](https://www.linkedin.com/in/vishal-lamba/) ## Ready to get started? Try AutoSPF free — no credit card required. [ Book a Demo ](/book-a-demo/) ## Related Articles [ Intermediate 3m 3 points to consider before setting your SPF record to -all (HardFail) May 22, 2025 ](/blog/3-points-to-consider-before-setting-your-spf-record-hardfail/)[ Intermediate 6m 6 Best practices for maintaining an SPF record Jun 5, 2025 ](/blog/6-best-practices-for-maintaining-an-spf-record/)[ Intermediate 3m Adding your SPF record to your domain provider Sep 2, 2024 ](/blog/adding-your-spf-record-to-your-domain-provider/)[ Intermediate 5m Are Your SPF and DKIM Identifiers Aligned? Jul 18, 2024 ](/blog/are-your-spf-and-dkim-identifiers-aligned/) ```json {"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138897474","https://www.linkedin.com/company/autospf","https://x.com/autospf01","https://www.g2.com/products/autospf/reviews"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://autospf.com/contact-us/"},"knowsAbout":["SPF Record Flattening","Sender Policy Framework","Email Authentication","DNS Management","DMARC","DKIM"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"AutoSPF","url":"https://autospf.com","description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","publisher":{"@type":"Organization","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"The Ultimate AutoSPF Guide To Zendesk SPF & DKIM Configuration","description":"In today’s email‑centric world, ensuring that your support and outbound emails are trusted by inbox providers like Gmail, Outlook, Yahoo.","url":"https://autospf.com/blog/the-ultimate-autospf-guide-to-zendesk-spf-and-dkim-configuration/","datePublished":"2026-01-13T21:45:27.000Z","dateModified":"2026-04-18T02:36:41.000Z","dateCreated":"2026-01-13T21:45:27.000Z","author":{"@type":"Person","@id":"https://autospf.com/authors/vishal-lamba/#person","name":"Vishal Lamba","url":"https://autospf.com/authors/vishal-lamba/","jobTitle":"Content Specialist","description":"Vishal Lamba writes AutoSPF's how-to guides and vendor-specific configuration walkthroughs. His work focuses on step-by-step implementation guides for major email platforms (Google Workspace, Microsoft 365, SendGrid, Mimecast, Proofpoint, Brevo, and others), troubleshooting common SPF errors, and translating RFC-level specifications into practical deployment procedures for IT administrators.","image":"https://media.mailhop.org/autospf/images/authors/vishal-lamba.jpg","knowsAbout":["SPF Vendor Configuration","Email Platform Integrations","SPF Troubleshooting","Technical Documentation","Step-by-Step Guides"],"worksFor":{"@type":"Organization","name":"AutoSPF","url":"https://autospf.com"},"sameAs":["https://www.linkedin.com/in/vishal-lamba/"]},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138897474","https://www.linkedin.com/company/autospf","https://x.com/autospf01","https://www.g2.com/products/autospf/reviews"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://autospf.com/contact-us/"},"knowsAbout":["SPF Record Flattening","Sender Policy Framework","Email Authentication","DNS Management","DMARC","DKIM"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://autospf.com/blog/the-ultimate-autospf-guide-to-zendesk-spf-and-dkim-configuration/"},"articleSection":"intermediate","keywords":"DKIM, SPF, SPF record","wordCount":1106,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/autospf/images/2026/01/spf-checker-6368.jpg","caption":"SPF & DKIM Configuration","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://autospf.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://autospf.com/blog/"},{"@type":"ListItem","position":3,"name":"Intermediate","item":"https://autospf.com/intermediate/"},{"@type":"ListItem","position":4,"name":"The Ultimate AutoSPF Guide To Zendesk SPF & DKIM Configuration","item":"https://autospf.com/blog/the-ultimate-autospf-guide-to-zendesk-spf-and-dkim-configuration/"}]} ```