DKIM & SPF Setup for Zendesk

To set up or edit your SPF record, you will need to add: include:_spf.google.com include:mail.zendesk.com

Edit existing SPF record

1. Log in to your DNS hosting provider
2. Look for a TXT containing v=spf1
3. In your existing SPF record, you will append include:_spf.google.com include:mail.zendesk.com
4. For example, if your existing record looks like v=spf1; mx; ip4:1.2.3.4; you would add the above include as follows v=spf1; mx; ip4:1.2.3.4; include:_spf.google.com include:mail.zendesk.com

Create a new SPF record

1. Follow the instructions from our How to Create a New SPF Record Guide.
2. In the Value field, enter: v=spf1 include:_spf.google.com include:mail.zendesk.com ~all and Save the TXT record.

Records for Subdomains

If you are creating a record for a subdomain, you will want to make sure that you specify the sub part of the domain in the Host/Name/Alias field for most DNS providers.

1. Enter the sub part of the domain, for example if the subdomain is mail.mxtoolbox.com you would want to enter mail into that field.

SPF and DMARC Alignment

By default, Zendesk will set you up for sending using one of their domains for the return-path address. This domain will NOT pass SPF Alignment. At this time, this provider does NOT provide any mechanism that will allow SPF Alignment to pass. You need to enable DKIM for this provider to ensure your email will pass DMARC Compliance.

How to Set Up/Modify DKIM for Zendesk

Zendesk allows DKIM authentication. Email service providers that support DKIM check inbound email to verify whether an organization that claimed to have signed a message actually did. To create a DKIM record for your domain name, do the following:

1. Log in to your domain registrar’s control panel

2. Find option to change DNS records

3. Locate CNAME records for your domain

4. Create CNAME record with values:

    Host Record – zendesk1._domainkey.yourcompany.com (Substitute your domain name as needed)

    Points To – zendesk1._domainkey.zendesk.com

5. Create second CNAME record with above values (*Use “2” instead of “1” in this record)

To enable digital signatures in Zendesk, follow these steps:

1. Click Manage and select Email from Channels category

2. Scroll to Custom Domain for DKIM and select Enable

3. Click Save

As a user of this outbound email provider, Zendesk customers are afforded DKIM signing because it supports that mechanism. By utilizing Zendesk’s self-service portal, you can manually set up DKIM at your convenience via CNAME records mentioned above. Overall, this Zendesk product provides beneficial components (e.g., DKIM signing, self-service set up with CNAME records) that result in a streamlined process.