This article covers the SPF and DKIM authentication processes for Hubspot and how are they managed in Valimail. While only one of the two authentication methods is required for an email to pass DMARC, our recommendation is to configure both whenever possible.

Hubspot supports both SPF and DKIM, but they do not send emails in SPF alignment by default.

DKIM and SPF configuration for Hubspot is done through a dedicated subdomain.

1. In your HubSpot account, click the settings icon in the main navigation bar.

2. In the left sidebar menu, navigate to Website -> Domains & URLs.

3. Click Connect a domain.

4. In the dialog box, select Email Sending, then click Connect. You'll then be directed to the domain connection screen.

5. On the domain connection screen, enter the email address you use to send emails from this domain, then click Next.

6. On the next screen, verify that the email sending domain is correct, then click Next.

7. Copy the DKIM key records and add them in Valimail Enforce. Additionally, copy and publish the first CNAME record in your DNS directly - this will allow HubSpot to publish an SPF record for the selected subdomain.

8. When you're done updating the values in Enforce and your DNS provider, select the Done checkbox in HubSpot.

9. After you add the DKIM keys in Valimail Enforce and the other CNAME record in your DNS, you'll see a Verified message letting you know your email sending domain is verified. Once you see the Verified message, click Done.

10. If you are in the process of adding the CNAME records in Enforce and/or in your DNS, you'll might see a Record invalid error displayed to the right of one or all of your records. Click check them again to see if the changes have propagated.

You can find the instructions on how to setup DKIM in Hubspot here.

You can find more detailed information on how to add a DKIM key in Valimail, here:

Once you establish that Hubspot is an authorized sender for your domain, you will need to add the service in your Enabled Senders.

You will find more detailed information on how to add a service for your domain in Valimail, here:

Note: If the Hub ID you were provided with is for example: 123456.spf00.hubspotemail.net, fill in the HubSpot ID and SPF ID fields when you add Hubspot as an Enabled Sender on your domain in Valimail.

Note: We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.