How do I set up Intercom so its email passes DMARC?

What does Intercom ask me to publish?

Intercom handles SPF for you by setting a custom return-path on all emails we send. You don't need to add your own SPF record unless advised otherwise.

Intercom makes the values for your account, so we do not print any here.

Where in Intercom are my values shown?

Go to Settings > Channels > Email where you'll find your Domains & addresses

In Intercom, go to Settings, then Channels, then Email, and open Domains & addresses.

Copy each value from there exactly as shown, and add each record at your DNS host.

Will p=reject block Intercom email?

A DMARC record with at least p=none is required.

Not once Intercom signs your email with your domain's DKIM key. DMARC passes when a message passes DKIM or SPF for your own domain, and the DKIM records Intercom gives you are on your domain.

Intercom asks for a DMARC record with at least p=none.

Intercom handles SPF through a custom return path, so you do not add your own SPF record unless told to.

Intercom also asks that your domain has a DMARC record. A domain has one DMARC record: if you have one, keep it and do not add another.

Before you raise your policy, read your DMARC reports and check that email from Intercom passes.