How do I set up Kit so its email passes DMARC?
Publish the records Kit shows in your account for your domain.
Last read from the sources at the foot of this page.
What does Kit ask me to publish?
By default, your friendly-from address will be your sending address that you send from, and the return-path will be a Kit address (kit.com).
Kit makes the values for your account, so we do not print any here.
Where in Kit are my values shown?
Click Settings in the lower-left corner of your account. Then, select Email in the available options. Under the Verified Sending Domains section, click Set up your Verified Sending Domain.
In Kit, click Settings at the lower left, select Email, and look under Verified Sending Domains.
Copy each value from there exactly as shown, and add each record at your DNS host.
Will p=reject block Kit email?
Adding a DMARC record is also a requirement in situations like: Complying with Gmail and Yahoo's email requirements if you send at least 5,000 emails a day
Not once Kit signs your email with your domain's DKIM key. DMARC passes when a message passes DKIM or SPF for your own domain, and the DKIM records Kit gives you are on your domain.
Kit lists a DMARC requirement for senders who send at least 5,000 emails a day to Gmail and Yahoo.
Kit also asks that your domain has a DMARC record. A domain has one DMARC record: if you have one, keep it and do not add another.
Before you raise your policy, read your DMARC reports and check that email from Kit passes.
Where does this come from?
- Kit: Verify your domain to optimize your deliverabilityhelp.kit.comRead 14 October 2026
- Kit: How to add a DMARC record to your verified sending domainhelp.kit.comRead 14 October 2026
- RFC 7489, DMARCrfc-editor.orgRead 14 October 2026
See what is open before anyone else does.
We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.
- We read your firm from outside.
- You see what is open, with the proof for the lead finding.
- If it is worth it, you order.
What happens if you go ahead. More at getleaktrace.com/see-it-first/.
Read the transcript
- 72 hours. One domain. Nothing to install.
- Discover. Every way in, found from outside.
- Validate. Every finding, proven. Dated and checkable by anyone.
- Close. Forged email: one click per step, where we reach your DNS host and you approve it.
- You get the fix for the rest, step by step, and we re-check until it is closed.
- Monitor. On monitoring: email settings, look-alikes and new host names re-checked every hour. Alerts within the hour.
- Every paid assessment is human-verified before release.
- The AI defense layer for businesses. getleaktrace.com/see-it-first/