How do I set up Mailchimp Transactional so its email passes DMARC?
Publish the records Mailchimp Transactional shows in your account for your domain.
Last read from the sources at the foot of this page.
What does Mailchimp Transactional ask me to publish?
Mailchimp Transactional won't send any email from unverified domains or domains without a valid DMARC policy and DKIM records.
Mailchimp Transactional prints these values in its own documentation, the same for every customer.
Mailchimp Transactional makes the other values for your account, so we do not print them here.
dkim1.mandrillapp.comdkim2.mandrillapp.comWhere in Mailchimp Transactional are my values shown?
Navigate to Settings and choose Domains Type a new domain in the domain input and click Add
In Mailchimp Transactional, go to Settings, then Domains. Next to your domain, click View DKIM settings.
Copy each value from there exactly as shown, and add each record at your DNS host.
Will p=reject block Mailchimp Transactional email?
A message satisfies the DMARC checks if at least one of the supported authentication mechanisms: 1. produces a "pass" result, and 2. produces that result based on an identifier that is in alignment
Not once Mailchimp Transactional signs your email with your domain's DKIM key. DMARC passes when a message passes DKIM or SPF for your own domain, and the DKIM records Mailchimp Transactional gives you are on your domain.
Mailchimp Transactional will not send from a domain that has no valid DMARC policy and DKIM records.
It asks only that a DMARC policy exists. A policy of p=none in relaxed mode is accepted.
Mailchimp Transactional also asks that your domain has a DMARC record. A domain has one DMARC record: if you have one, keep it and do not add another.
Before you raise your policy, read your DMARC reports and check that email from Mailchimp Transactional passes.
Where does this come from?
- Mailchimp Transactional: Authentication and Deliverymailchimp.comRead 14 October 2026
- RFC 7489, DMARCrfc-editor.orgRead 14 October 2026
See what is open before anyone else does.
We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.
- We read your firm from outside.
- You see what is open, with the proof for the lead finding.
- If it is worth it, you order.
What happens if you go ahead. More at getleaktrace.com/see-it-first/.
Read the transcript
- 72 hours. One domain. Nothing to install.
- Discover. Every way in, found from outside.
- Validate. Every finding, proven. Dated and checkable by anyone.
- Close. Forged email: one click per step, where we reach your DNS host and you approve it.
- You get the fix for the rest, step by step, and we re-check until it is closed.
- Monitor. On monitoring: email settings, look-alikes and new host names re-checked every hour. Alerts within the hour.
- Every paid assessment is human-verified before release.
- The AI defense layer for businesses. getleaktrace.com/see-it-first/