This article covers the SPF and DKIM authentication processes for Mailerlite and how they are managed in Valimail Enforce. While only one of the two authentication methods is required for an email to pass DMARC, our recommendation is to configure both whenever possible.


Configuring DKIM authentication for your Mailerlite emails

Before you can set up DKIM for Mailerlite, you will need to verify your email address.

How to verify your email address

1. Head to the Settings page select the Domains tab.

2. Click Add domain.

3. Enter the email address you wish to use to send emails from and click Save.

4. Once you receive the confirmation email, click on the Confirm my email address link.

5. You will see a success message confirming the domain verification.

How to authenticate your domain

1. Head to the Settings page select the Domains tab.

2. Click on Authenticate for a verified domain, or Add domain for an unverified one (and then click on Send confirmation email). 

3. You’ll get the Name and Value fields for the DKIM and SPF records of this domain. Keep this page open.

4. Copy the DKIM key record by using the Copy button on the Mailerlite account window and add it to Valimail Enforce. Additionally, you will need to also add the Mailerlite service to your Enabled Senders list which is also on the Configuration page in Enforce.

5. After you add the DKIM key and Mailerlite service to your Enabled Senders list, head back to your MailerLite Domains tab and click on the Authenticate button for the domain you want to authenticate.

6. Click on the green Check DNS Records button to check if the DKIM and SPF records match.

If they match, the records will be approved and the domain will be authenticated.

You can also find the instructions on how to set up DKIM and SPF for Mailerlite here.

Add a Mailerlite DKIM key in Enforce

1. Go to your domain's Configuration page in Valimail Enforce and publish the newly created DKIM key.

    a. Scroll down and add the two DKIM keys in your configuration, by clicking on Add a DKIM key

    b. Enter the selector name, the DKIM TXT value (the actual value is the entire string after the p= tag), associate the key with Mailerlite and then click Add.

You can find more detailed information on how to add a DKIM key in Valimail Enforce here.

Configuring SPF authentication for your Mailerlite emails

Once you establish that Mailerlite is an authorized sender for your domain, you will need to add the service in your Enabled Senders list in Enforce.

1. Please go to your domain's Configuration page in Enforce.

2. Click on the + sign from the Enabled Senders section:

3. Choose Mailerlite from the list of configurable senders and then click Enable:

We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.

Enable SPF alignment in Mailerlite for your domain

You may notice that Mailerlite emails are not authenticated via SPF, even after you have added Mailerlite to your domain's configuration. This is likely caused by Mailerlite not sending SPF aligned-mail and can be corrected by configuring a CNAME record.

More details on how to achieve that are found in the article here.

As always, if you have any questions, please don't hesitate to submit a ticket.