How do I set up Klaviyo so its email passes DMARC?
Publish the records Klaviyo shows in your account for your domain.
Last read from the sources at the foot of this page.
What does Klaviyo ask me to publish?
Learn how to set up a branded sending domain (also known as a dedicated sending domain) so that when emails reach inbox providers, they will appear to come from your brand instead of Klaviyo.
Klaviyo makes the values for your account, so we do not print any here.
Where in Klaviyo are my values shown?
Click your company name in the bottom left corner of your account. Select Settings . Choose Domains from the main tab. Select Add Domain .
In Klaviyo, click your company name at the bottom left, select Settings, choose Domains, and select Add Domain.
Copy each value from there exactly as shown, and add each record at your DNS host.
Will p=reject block Klaviyo email?
Klaviyo generates the following DMARC record, which satisfies inbox provider sender requirements without affecting the delivery of your emails: v=DMARC1; p=none;
Not once Klaviyo signs your email with your domain's DKIM key. DMARC passes when a message passes DKIM or SPF for your own domain, and the DKIM records Klaviyo gives you are on your domain.
Klaviyo can add a basic DMARC record for you with the policy set to none when you set up a branded sending domain.
Before you raise your policy, read your DMARC reports and check that email from Klaviyo passes.
Where does this come from?
- Klaviyo: How to set up a branded sending domainhelp.klaviyo.comRead 14 October 2026
- RFC 7489, DMARCrfc-editor.orgRead 14 October 2026
See what is open before anyone else does.
We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.
- We read your firm from outside.
- You see what is open, with the proof for the lead finding.
- If it is worth it, you order.
What happens if you go ahead. More at getleaktrace.com/see-it-first/.
Read the transcript
- 72 hours. One domain. Nothing to install.
- Discover. Every way in, found from outside.
- Validate. Every finding, proven. Dated and checkable by anyone.
- Close. Forged email: one click per step, where we reach your DNS host and you approve it.
- You get the fix for the rest, step by step, and we re-check until it is closed.
- Monitor. On monitoring: email settings, look-alikes and new host names re-checked every hour. Alerts within the hour.
- Every paid assessment is human-verified before release.
- The AI defense layer for businesses. getleaktrace.com/see-it-first/