DNS Records for Domain Authentication (SendGrid)
Introduction
This article explains how to locate, view, and extract the DNS Records generated by SendGrid for Domain Authentication.
Why Domain Authentication is Required
Domain Authentication helps:
- Verify ownership of the sending domain
- Improve email deliverability
- Reduce spoofing and phishing risks
- Authenticate messages using SPF and DKIM standards
Prerequisites
- Access to SendGrid with Admin permissions
- Target Domain
- DNS Provider access
Step-By-Step Process
- Log in to SendGrid.
- Select Settings > Sender Authentication.
- Click Authenticate Your Domain.
- Select a DNS Provider or Other Host.
- Enter domain details and continue.
- Review and copy the generated DNS records.
- Add them to your DNS provider.
- Return to SendGrid and click Verify.
Expected Outcome
The Domain's Status shows Verified and SPF/DKIM authentication is enabled.
Troubleshooting
Ensure the records are an exact match, then wait for DNS propagation and verify no conflicts exist.
Host Name | Type | Value |
em123.example.com | CNAME | u123.wl.sendgrid.net |
s1._domainkey | CNAME | s1.domainkey.u123.wl.sendgrid.net |
Verification Failed
Verify the following:
- DNS records match the values provided by SendGrid.
- No typographical errors exist.
- DNS propagation has completed.
- Existing DNS records do not conflict with the new records.
Partial Verification Success
If only some records are verified:
- Wait for DNS propagation to complete.
- Retry the verification process.
- Check with your DNS provider for propagation status
Additional Information
Disclaimer
This document is intended for informational and guidance purposes only. The procedures described in this document are based on standard Twilio SendGrid Domain Authentication functionality available at the time of publication. User interfaces, menu options, DNS requirements, and platform features may change without prior notice.