This article covers the SPF and DKIM authentication processes for Help Scout and how they are managed in Valimail. While only one of the two authentication methods is required for an email to pass DMARC, our recommendation is to configure both whenever possible.

1. You need 2 CNAME records at your DNS hosting provider. When a recipient server checks for the DKIM key at your domain, these records will forward that check over to Help Scout servers for the key.

strong1._domainkey.yourdomain.com will point to strong1._domainkey.helpscout.net

strong2._domainkey.yourdomain.com will point to strong2._domainkey.helpscout.net

2. If you manage DKIM for your domain in Valimail, you will need to add these 2 CNAME DKIM keys on your domain's Configuration page in Valimail Enforce.

3. After you've added the records in Valimail, open your Help Scout mailbox and head over to Settings -> Outgoing Email and click the Test Settings button. If a valid CNAME record is found for your domain, you'll see the DKIM status indicator change to Active.

You can also find the instructions on how to set up DKIM and SPF for Help Scout, here.

You can find more detailed information on how to add a DKIM key in Valimail, here:

Once you establish that Help Scout is an authorized sender for your domain, you will need to add the service in your Enabled Senders.

You will find more detailed information on how to add a service for your domain in Valimail, here:

Note: We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.