Email senders · Help Scout

How do I set up Help Scout so its email passes DMARC?

Publish the records Help Scout documents for your domain.

Last read from the sources at the foot of this page.

Check my firm
01

What does Help Scout ask me to publish?

By default, messages are sent from helpscout.net "on behalf of" your domain and signed for helpscout.net . When you add two CNAME records at your DNS host to point to our DKIM key, messages are sent from - and signed as - your domain.

Help Scout prints these values in its own documentation, the same for every customer.

DKIM: CNAME record at strong1._domainkey
strong1._domainkey.helpscout.net
DKIM: CNAME record at strong2._domainkey
strong2._domainkey.helpscout.net
02

Will p=reject block Help Scout email?

This is no longer needed; emails sent from Help Scout servers will now pass SPF validation using a variable envelope return path (VERP) address set to our servers.

Not once Help Scout signs your email with your domain's DKIM key. DMARC passes when a message passes DKIM or SPF for your own domain, and the DKIM records Help Scout gives you are on your domain.

Help Scout no longer asks for an SPF record. Its mail passes SPF through a return path on Help Scout's own domain.

Because of that return path, SPF passes but does not line up with your domain for DMARC. The two DKIM records are what give DMARC alignment.

You do not need a DMARC policy to send from Help Scout servers.

Before you raise your policy, read your DMARC reports and check that email from Help Scout passes.

Sources

Where does this come from?

Related
04 · Check my firm

See what is open before anyone else does.

We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.

What we readPublic sources only
Who sees itYou alone
Delivery72 hours from confirmation
Meeting firstNone
Reading requestPrivate
Problem: Enter your firm's name.
Problem: Enter your name.
Problem: Enter a full address, like [email protected].
Problem: That does not look like a website. Try yourdomain.com.

A person reads every request. Your outside reading comes by email within 72 hours from [email protected]. Privacy