Set up SPF and DKIM signatures

SPF & DKIM signatures

If you've set a custom 'from' email address for notifications, SPF and DKIM are two separate strategies used to more properly authenticate the emails we send on your behalf. We strongly recommend you take the time to get both of these set up - your email delivery largely depends on both of them being present.

To get both set up, we need you to set a few DNS records on the domain that we will be sending email from on your behalf.

SPF

SPF is short for Sender Policy Framework and basically answers the question "what IP addresses should my legitimate mail be coming from?" for the recipient mail servers. We have a very strict listing of the IP addresses that we send email from, and you'll need to reference our SPF record in your own SPF record.

SPF validation occurs on the recipient end of things (your customers, the people receiving notifications from your status page).

DKIM

DKIM is short for DomainKeys Identified Mail, and is a way for Statuspage's email delivery partners to validate that you've given us permission to send email on your behalf. We give you multiple DNS records to set for DKIM because we have multiple email providers, and they each need to know that we've been given permission from you. You setting the DNS records is your way of saying "yep, Statuspage is my friend and can send email for me!".

DKIM validation occurs on the originating end of things (our email providers, the people sending the email).

Configuring SPF & DKIM

1. Navigate to Your page > Customize page and email.

2. Click the Customize email tab.

3. Fill in the value for Send from email field. We recommend a format something along the lines of "Company Support <support@company.com>".
   - Optionally, you can also set a separate Reply to email if you need to route responses elsewhere.

4. Click Save email customizations, and a new link will appear to get you started with the SPF and DKIM process.

5. Proceed to Your page > DNS configuration.

On the DNS configuration page, you'll see several values that you need to set DNS records for. To learn more about DNS configuration, see the Configure your DNS article.

After you set each DNS record, give it a few minutes to propagate (up to 10 minutes to be safe) then click Revalidate all records.

Once validated, we will start to send authenticated and signed email within 24 hours.