This article covers the SPF and DKIM authentication processes for FastMail and how they are managed in Valimail. While only one of the two authentication methods is required for an email to pass DMARC, our recommendation is to configure both whenever possible.

1. When your domain is not correctly signed with DKIM, you may see a warning banner when you attempt to send mail from this domain, and you will see your domain listed as Needs attention on the Settings → Domains page.

2. If you click Edit on your domain, and then on Get Instructions, we will give you a list of DNS records to use to sign your domain.

Important: If you manage DKIM in Valimail for your domain, you will need to add the 2 FastMail CNAME DKIM keys on your domain's Configuration page in Valimail Enforce.

You can also find the instructions on how to set up DKIM and SPF for FastMail, here.

You can find more detailed information on how to add a DKIM key in Valimail, here:

Once you establish that FastMail is an authorized sender for your domain, you will need to add the service in your Enabled Senders.

You will find more detailed information on how to add a service for your domain in Valimail, here:

Note: We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.