How do I set up Typeform so its email passes DMARC?

What does Typeform ask me to publish?

So if you have your own website domain (eg: mybusinesswebsite.com), you can set this up in Typeform, so that emails from your Typeform account to your Contacts will come from that domain.

Typeform makes the values for your account, so we do not print any here.

Typeform also gives MX records, for the replies and bounces it receives. Add them only at the name Typeform shows you, never at your domain itself: the MX records at your domain decide where all of your email is delivered.

Where in Typeform are my values shown?

Open your Typeform account, and go to Admin settings , under your Organization icon in the top left corner.

In Typeform, open Admin settings under the Organization icon, then Automation email domains.

Copy each value from there exactly as shown, and add each record at your DNS host.

How do I add Typeform to the SPF record I already have?

SPF implementations MUST limit the total number of those terms to 10 during SPF evaluation, to avoid unreasonable load on the DNS. If this limit is exceeded, the implementation MUST return "permerror".

Add the include Typeform shows you inside the one SPF record you have, before its last word, and keep every service already in it. Never add a second SPF record: two make the check fail for every message.

Will p=reject block Typeform email?

A message satisfies the DMARC checks if at least one of the supported authentication mechanisms: 1. produces a "pass" result, and 2. produces that result based on an identifier that is in alignment

Not once Typeform signs your email with your domain's DKIM key. DMARC passes when a message passes DKIM or SPF for your own domain, and the DKIM records Typeform gives you are on your domain.

Before you raise your policy, read your DMARC reports and check that email from Typeform passes.