Deliverability settings and SPF/DKIM records


What are SPF/DKIM records? 

SPF/DKIM records are industry-standard security mechanisms that authorize Front to send emails on our customers’ behalf. When you add an SMTP email channel, it’s critical to correctly configure SPF/DKIM records for your email domain because they reduce the risk messages you send from Front will be marked as spam in your recipients’ inbox.


SPF/DKIM settings do not impact your ability to receive emails in Front. If you have validated your email channel in Front, any emails received by that domain will appear in Front. However, these settings are important to ensure that emails you send from Front are not marked as spam in your recipient's inbox or caught in their spam filters. 

We will display warnings to keep this top of mind if you have not configured your SPF/DKIM records for channels that require them. If you are using a Google Group or other channel using email redirection, you should add SPF/DKIM records for your domain. If you are using a Gmail personal account channel, or Office365 sync channel, you do not need to worry about SPF/DKIM records as we rely on the Gmail and Office365 APIs to send and receive email.


Whenever there are missing SPF/DKIM records for an SMTP channel, all members of the team will see prominent warnings in the app indicating this setup step has not been completed.

Follow these steps to add your SPF/DKIM records for each domain you are using to send emails from Front. There is one Deliverability settings page visible to company admins where you can configure records for all your email domains in one place. If you are not a company admin, you will not see this settings page and will need to get your admin’s help.

Step 1 

Go into Settings and locate your company settings section on the left.

Step 2

Click on the Deliverability tab. Here, company admins can configure SPF/DKIM records. This page will only be visible to company admins after they add at least one team SMTP channel. 

Note: If you do not see the Deliverability tab, it is likely because only individual inboxes have been added which require these DNS records to be configured. If this is the case, you will find the records listed under My Inboxes > [Select your inbox] > Improve delivery rates - SPF / DKIM

Step 3

You will see a list of your SMTP channel domains under Domains on the left. Any email domains with missing SPF/DKIM records will have a yellow warning icon.

Step 4

Add your SPF/DKIM records for each channel with a warning icon. The instructions are specific to the DNS provider you use. Here are instructions for the most popular types:

If you have another DNS provider not listed above, see this section for general tips on how to add the records to your DNS.

Step 5

When you’ve successfully added the SPF/DKIM records and you click the Check DNS settings button, the warning icon will be removed from the channel name in the list and the DNS records will say Verified.


DMARC is an optional deliverability record unrelated to Front that your IT team may already have in place.  If your domain already uses DMARC for email authentication, and you plan to use Front's SMTP channels, then it's important to ensure that DMARC record uses "relaxed" SPF alignment.  This appears as a 'aspf=r' flag in the DMARC record itself for the target domain.  Please be sure to check with your IT team before using Front SMTP channels to ensure proper email delivery.

Tips for adding DNS records

Each DNS provider has their own format of how the records should be entered, but here are some general tips on how to enter Front's records that should apply to most DNS settings:

  • 1st DNS Record: The Value that you copy into your DNS settings should not include the 100 in the beginning nor the period (.) at the end.
  • 2nd DNS Record: The Name field that we display lists the subdomain before your actual domain name, so in the example screenshot in Step 5 above, the DNS subdomain field you enter would be front-mail. Do not include your own domain name.
  • 3rd DNS Record: Similar to the 2nd DNS Record in the Name field, the subdomain is the part before your own domain name.


If an SMTP channel uses an email domain that does not have SPF/DKIM records set, a warning will appear in your inbox where that channel is housed. When you click into the inbox, there will be a banner across the top explaining the issue. 

If you are a company admin, the banner warnings will be linked to your Deliverability settings page, where you can configure your SPF/DKIM records.

If you are a team member or team admin, you will get a popup with a template email to send to your IT team and your admin because you do not have the appropriate permissions to make these changes.

A warning icon will also be shown on the inbox in your inbox settings. This will be shown for all team SMTP channels and individual inboxes where the SMTP channel is the same domain as a team channel. If you have set up an individual inbox with a different email domain (i.e. a “non-work” email), these warnings will not be displayed.

Note: Wix, HostGator, SiteGround and Squarespace don't support creating the required MX record. If you need to use one of these DNS providers, we recommending configuring custom SMTP for these channels to send mail via your own mail servers, using your existing DNS records.

11replies Oldest first
  • Oldest first
  • Newest first
  • Active threads
  • Popular
Like1 Follow
  • 3 wk agoLast active
  • 11Replies
  • 7901Views
  • 12 Following