Skip to main content

Domain authentication

Written by Remis
Updated over 5 months ago

💡 This guide gives you general info on authenticating your domain, but we've got something even better: Automatic domain authentication for most hosting providers, details here.

Authenticating with various domain hosts

Since MailerLite does not provide a service to host your domain, it needs to be hosted outside of MailerLite by a third-party domain hosting provider such as GoDaddy or BlueHost. For more info on different providers, check out our article on Authenticating with various domain hosts.

Is authentication required to send emails with MailerLite?

In light of Google and Yahoo's sender requirements for email senders, it is required to authenticate your domain if you are using a custom domain for sending.

New MailerLite accounts can send their first campaigns without authenticating a domain during the 14 day trial period only.

How to authenticate your domain

  1. Head to the Account settings page.

  2. Select the Domains tab.

  3. Click Add domain.

  4. Enter the email address you wish to use to send emails from and click Save.


If your DNS provider is one of our partners, you can take advantage of our automatic setup, which simplifies the process even further.

A popup will appear, prompting you to start the authentication process. Click Continue.

This tool will scan your domain and detect which provider is the host.

Once the provider has been detected, follow the instructions to connect to your domain.

If your provider is not detected using the above method, or if you wish to go through the steps manually, choose the option Or manually authenticate your domain.

From here, select your domain hosting provider from the dropdown menu. Choose Other if your provider is not listed.


​Click Continue.

The Name and Value fields for the DKIM, SPF, and TXT records of this domain will show. Keep this page open.

Access the DNS settings of your domain located in the account of your hosting provider. If you don’t know how, contact your hosting provider for further support (in most cases, their Support team can add the records for you).

Add the DKIM as a CNAME record, the SPF as a TXT record, and a Domain verification as a TXT record. Use the Name and Value fields that we provide for you. Please note that these records cannot be modified within MailerLite, so they have to be an exact match.


How to get the DKIM and SPF records approved

  1. Head back to your MailerLite Domains tab and click on the Authenticate button for the domain you want to authenticate.

  2. Click on the green Check DNS Records button to check if the DKIM and SPF records match.

If they match, the records will be approved and the domain will be authenticated.


However, sometimes the site will say that one or both records were not approved, even if all of the information was correctly submitted.

DNS propagation delays occur because the update process involves multiple servers worldwide, which can take up to 48 hours to complete. During this period, double-check records for consistency and ensure no discrepancies in the values entered.

Overview of DNS Propagation Timing

DNS propagation refers to the time it takes for changes made to DNS records to take effect globally. Here are some key points to consider: The domain authentication process operates 24/7, which means you can initiate or update your domain authentication at any time convenient for you. This uninterrupted operation ensures flexibility and accessibility for users in any time zone.

  1. Typical Timeline: DNS propagation can take up to 24 hours to complete. However, in many cases, changes occur more quickly and may propagate within a few hours.

  2. Hosting Provider Variability: The propagation time often depends on your hosting provider. Some providers may apply changes at different intervals, leading to minor delays in some locations.

There are 2 reasons why this happens:

Verifying DNS Changes

To ensure that DNS records are updated correctly and your domain is authenticated, follow these steps:

  1. Confirm TXT, SPF, or Verification Records: Double-check that the DNS records are correctly added as per the instructions provided by your service provider.

  2. Use DNS Verification Tools: Tools like What’s My DNS allow you to check whether your records are showing up across global DNS servers, enabling you to monitor the propagation process.

  3. Spot-check Specific Records: For instance, verify SPF records for authentication. If records propagate unevenly, rest assured that this is normal during the process.

  4. Check Authentication Status: Review your domain status page within MailerLite's settings. If the domain shows as 'authenticated,' it is ready to use.


There are 2 reasons why this happens:

  • It can take the servers up to 24 hours to completely update this information. Most of the time, however, it is approved and updated in a matter of minutes.

  • Some information has to be re-checked and updated.

Troubleshooting authentication errors

  1. Incorrect DNS Record Entries: Double-check the DNS entries against what MailerLite provides to ensure accuracy.

  2. Subdomain vs. Root Domain Discrepancy: If you added records for the root domain but configured a subdomain (or vice versa), authentication will fail.

  3. Propagation Delays: Wait for additional time if all entries are correct but still not authenticated (up to 24 hours).

Common Tools and Guidelines

  • What’s My DNS: A free online tool for checking TXT, SPF, and other DNS records across various locations.

  • Domain Management Platform: Use your hosting provider or MailerLite’s domain management tool to check and confirm the current status of any updates and changes.

If you encounter any unexpected issues or see that your records haven't been approved right away, don't fret! Give it a little time, and it's likely to sort itself out. If not, we suggest following these troubleshooting steps, or contacting your hosting provider for help.

Other Troubleshooting Considerations

  1. Records Not Propagating: Re-check for typos or improperly formatted strings in DNS settings.

  2. Partial Propagation: If only some DNS servers reflect changes, wait a few hours and check again.

  3. Contact Support: If propagation exceeds 24 hours and issues persist, contact your hosting provider or MailerLite support for further assistance.

  1. Incorrect DNS Record Entries: Double-check the DNS entries against what MailerLite provides to ensure accuracy.

  2. Subdomain vs. Root Domain Discrepancy: If you added records for the root domain but configured a subdomain (or vice versa), authentication will fail.

  3. Propagation Delays: Wait for additional time if all entries are correct but still not authenticated (up to 24 hours).

Did this answer your question?