Setting up DMARC, SPF, DKIM with Amazon SES

For EmailOctopus Connect users, this article explains how to set up DMARC, SPF and DKIM records and verify your domain in Amazon SES and EmailOctopus.

In this article

Note: This article only applies if you have integrated Amazon SES with your EmailOctopus account.

SPF, DKIM, and DMARC control which servers can send as your domain (SPF), authenticate a message, proving that you sent it (DKIM), and instruct recipients what to do if one or both of those checks fail (DMARC)


The instructions below are a walkthrough on how to add SPF, DKIM and DMARC to your Amazon SES account (which will then be picked up by EmailOctopus).

In this process there will be significant changes made to your DNS settings, we’d advise that you take great care and have sufficient technical knowledge to make these changes. It’s well worth familiarising yourself with how to make DNS changes before starting this guide. We also recommend keeping your DNS tab/window open, throughout the walkthrough.


First, we’ll need to log in to the AWS dashboard and navigate to the Amazon SES dashboard.

Click on the Verify a New Domain button.

  • Enter your domain name (
  • Tick Generate DKIM Settings
  • Click Verify This Domain

Setting up DKIM


Now you should see the following screen with all of the DKIM DNS entries listed (NOTE, your values will be different from the screenshot).

  • Download the CSV containing the DNS records, and open it.


You will need to apply the DNS records to your DNS, you do not need to apply the Email Receiving Record. Instructions on how to do this for a few DNS providers are below. Often the DNS is hosted with the same company as that who provided your domain name.



  • Upon returning to the SES dashboard your domain should be listed as pending.
  • Once Amazon has completed verifying your domain they’ll send you an email notifying you of the success. This should take less than 5 minutes. You will receive an email for both Domain Verification and completed DKIM set-up.


Next up, you will need to set-up a custom Mail From domain. This will allow Amazon SES to mark emails as “coming from” your domain rather than from Amazon.

  • Click on your domain in the SES domain dashboard.
  • Click on Set MAIL FROM Domain
  • Create a new subdomain to use as your MAIL FROM domain. We use in this example.
  • Copy the DNS settings which appear, in the same way as you copied the records previously

  • Once Amazon is able to verify the DNS settings they will send you an email telling you that it has been successfully verified.

Setting up SPF-DMARC

  • Go to to create your free account. This account will receive the daily ISP reports, which will then be sent to you on a weekly basis.
  • Enter your usual email address to receive your DMARC status reports
  • Enter the subdomain, as set-up previously, in the send reports about this domain field.

Our example was

  • Now you should see a screen similar to this:

  • Copy the above DNS records into your DNS providers settings, and save them.

Still need help? Contact Us Contact Us