This article covers the SPF and DKIM authentication processes for Braze and how they are managed in Valimail. Because this service leverages Sparkpost's email infrastructure, it requires additions to your DNS records outside of the Valimail platform. Adding Braze as an authorized sender in the Valimail platform usually requires a dedicated subdomain to be pointed to the Sparkpost infrastructure and typically the DKIM keys will be added in the Valimail platform.

This method confirms that your Braze email-sending domain is authorized to send mail on your behalf. This method is designed to validate the sender’s authenticity and ensure the integrity of the message is preserved. It also uses individual cryptographic digital signatures so ISPs can be sure the mail they’re delivering is the same as the mail you sent.

To setup DKIM in Braze for your domain, please contact Braze support.

Braze signs the mail with your secret private key. The ISPs verify the signature against your public key, which is stored in your custom DNS record. No two signatures are exactly alike, and only your public key can successfully verify your private key signature.

You can also find the instructions on how to set up DKIM and SPF for Braze, here.

You can find more detailed information on how to add a DKIM key in Valimail, here:

Once you establish that Braze is an authorized sender for your domain, you will need to add the service in your Enabled Senders.

You will find more detailed information on how to add a service for your domain in Valimail, here:

Note: We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.