Postmark: SPF, DKIM and DMARC setup

This guide shows the DNS records Postmark needs so your email is authenticated: SPF, DKIM and DMARC. Use the exact values from your Postmark account where they differ — providers update them from time to time.

1. SPF record for Postmark

Postmark handles SPF through a custom Return-Path domain: add the CNAME it shows (typically pm-bounces.yourdomain.com → pm.mtasv.net). You do not need a Postmark include on your root domain.

Use the SPF Generator to combine several services and the SPF Checker to confirm you stay under 10 DNS lookups.

2. DKIM for Postmark

In Postmark, follow this path and publish the record it shows:

1. Postmark → Sender Signatures / Domains → your domain → DNS Settings → add the DKIM TXT record (its selector contains a date and "pm") and the Return-Path CNAME
2. Verify.
3. Give DNS a few minutes, then confirm the record with the DKIM Checker.

Once published, verify it with the DKIM Checker (it can also discover common selectors).

3. DMARC

After SPF and DKIM pass, add a DMARC record so receivers know your policy and send you reports. Start in monitoring mode:

v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com

Then follow the step-by-step DMARC rollout to reach quarantine and reject safely.

Where to add the records

• Cloudflare — Cloudflare dashboard → select your domain → DNS → Records → Add record. For mail records keep the proxy (orange cloud) OFF.
• GoDaddy — GoDaddy → My Products → your domain → DNS → Manage DNS → Add New Record.
• Namecheap — Namecheap → Domain List → Manage → Advanced DNS → Add New Record. Use "@" for the root domain.
• Hostinger — Hostinger hPanel → Domains → your domain → DNS / Nameservers → Manage DNS records.
• Amazon Route 53 — AWS console → Route 53 → Hosted zones → your domain → Create record. Wrap TXT values in quotes.

Frequently asked questions