How do I set up SMTP2GO so its email passes DMARC?
Publish the records SMTP2GO shows in your account for your domain.
Last read from the sources at the foot of this page.
What does SMTP2GO ask me to publish?
Adding a verified sender domain means that SPF and DKIM are automatically handled by us, and use DNS records at your own domain name.
SMTP2GO makes the values for your account, so we do not print any here.
Where in SMTP2GO are my values shown?
To verify your domain, we provide you with three CNAME records to add to the domain's DNS settings. SPF is covered by the first CNAME record which is the subdomain used for the return-path address we set on your behalf. Note: You do not need to update your domain's existing SPF record.
In SMTP2GO, go to Sending, then Verified Senders, then Sender domains.
Copy each value from there exactly as shown, and add each record at your DNS host.
Will p=reject block SMTP2GO email?
It's important to note that DMARC is not handled by SMTP2GO directly and is a separate TXT record you need to add to the domain's DNS settings.
Not once SMTP2GO signs your email with your domain's DKIM key. DMARC passes when a message passes DKIM or SPF for your own domain, and the DKIM records SMTP2GO gives you are on your domain.
SMTP2GO does not set up DMARC. It is a separate TXT record you add yourself.
SMTP2GO says you do not need to change your domain's existing SPF record.
Mail sent from a single verified address, not a verified domain, is not signed with your domain's DKIM.
Before you raise your policy, read your DMARC reports and check that email from SMTP2GO passes.
Where does this come from?
- SMTP2GO: SPF, DKIM and DMARC Overviewsupport.smtp2go.comRead 14 October 2026
- SMTP2GO: Verified Senderssupport.smtp2go.comRead 14 October 2026
- RFC 7489, DMARCrfc-editor.orgRead 14 October 2026
See what is open before anyone else does.
We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.
- We read your firm from outside.
- You see what is open, with the proof for the lead finding.
- If it is worth it, you order.
What happens if you go ahead. More at getleaktrace.com/see-it-first/.
Read the transcript
- 72 hours. One domain. Nothing to install.
- Discover. Every way in, found from outside.
- Validate. Every finding, proven. Dated and checkable by anyone.
- Close. Forged email: one click per step, where we reach your DNS host and you approve it.
- You get the fix for the rest, step by step, and we re-check until it is closed.
- Monitor. On monitoring: email settings, look-alikes and new host names re-checked every hour. Alerts within the hour.
- Every paid assessment is human-verified before release.
- The AI defense layer for businesses. getleaktrace.com/see-it-first/