How do I set up Pipedrive so its email passes DMARC?

What does Pipedrive ask me to publish?

In Campaigns, we require you to add three CNAME records to your domain registrar page. The fourth record you need to add is the DMARC TXT record.

Pipedrive makes the values for your account, so we do not print any here.

Where in Pipedrive are my values shown?

Go to Campaigns > Settings > Domain authentication

In Pipedrive, go to Campaigns, then Settings, then Domain authentication.

Copy each value from there exactly as shown, and add each record at your DNS host.

How do I add Pipedrive to the SPF record I already have?

SPF implementations MUST limit the total number of those terms to 10 during SPF evaluation, to avoid unreasonable load on the DNS. If this limit is exceeded, the implementation MUST return "permerror".

Add the include Pipedrive shows you inside the one SPF record you have, before its last word, and keep every service already in it. Never add a second SPF record: two make the check fail for every message.

Will p=reject block Pipedrive email?

Domain authentication is optional, but we strongly recommend it if you use our Campaigns feature and have DMARC-protected domains.

Not once Pipedrive signs your email with your domain's DKIM key. DMARC passes when a message passes DKIM or SPF for your own domain, and the DKIM records Pipedrive gives you are on your domain.

Pipedrive says domain authentication is optional, and strongly recommends it for Campaigns senders on domains that have DMARC.

Pipedrive also asks that your domain has a DMARC record. A domain has one DMARC record: if you have one, keep it and do not add another.

Before you raise your policy, read your DMARC reports and check that email from Pipedrive passes.