Email senders · Mailjet

How do I set up Mailjet so its email passes DMARC?

Publish the records Mailjet shows in your account for your domain.

Last read from the sources at the foot of this page.

Check my firm
01

What does Mailjet ask me to publish?

The include:spf.mailjet.com directive tells recipient servers that Mailjet's servers are authorized to send emails on behalf of your domain.

Mailjet prints these values in its own documentation, the same for every customer.

Mailjet makes the other values for your account, so we do not print them here.

SPF: add inside your one SPF record
include:spf.mailjet.com
02

Where in Mailjet are my values shown?

Navigating to Account > Domains & Sender addresses > SPF/DKIM Authentication > Setup SPF/DKIM Authentication.

In Mailjet, go to Account, then Domains & Sender addresses, then SPF/DKIM Authentication.

Copy each value from there exactly as shown, and add each record at your DNS host.

03

How do I add Mailjet to the SPF record I already have?

SPF implementations MUST limit the total number of those terms to 10 during SPF evaluation, to avoid unreasonable load on the DNS. If this limit is exceeded, the implementation MUST return "permerror".

Add include:spf.mailjet.com inside the one SPF record you have, before its last word, and keep every service already in it. Never add a second SPF record: two make the check fail for every message.

An SPF record may make at most 10 DNS lookups. Each include counts, and so do the includes inside it. Past 10, the check fails, so remove services you no longer use before you add a new one.

04

Will p=reject block Mailjet email?

A message satisfies the DMARC checks if at least one of the supported authentication mechanisms: 1. produces a "pass" result, and 2. produces that result based on an identifier that is in alignment

Not once Mailjet signs your email with your domain's DKIM key. DMARC passes when a message passes DKIM or SPF for your own domain, and the DKIM records Mailjet gives you are on your domain.

Before you raise your policy, read your DMARC reports and check that email from Mailjet passes.

Sources

Where does this come from?

Related
06 · Check my firm

See what is open before anyone else does.

We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.

What we readPublic sources only
Who sees itYou alone
Delivery72 hours from confirmation
Meeting firstNone
Reading requestPrivate
Problem: Enter your firm's name.
Problem: Enter your name.
Problem: Enter a full address, like [email protected].
Problem: That does not look like a website. Try yourdomain.com.

A person reads every request. Your outside reading comes by email within 72 hours from [email protected]. Privacy