SPF/DKIM Deliverability settings and removing "via sendgrid.net" from emails
This is advanced material that would best be done by an IT admin or someone that fully understands what it means to make changes to DNS records.
What are SPF/DKIM records?
SPF/DKIM records are industry-standard security mechanisms that authorize Front to send emails on our customers’ behalf. When you add an SMTP email channel, it’s critical to correctly configure SPF/DKIM records for your email domain because they reduce the risk messages you send from Front will be marked as spam in your recipients’ inbox.
SPF/DKIM settings do not impact your ability to receive emails in Front. If you have validated your email channel in Front, any emails received by that domain will appear in Front. However, these settings are important to ensure that emails you send from Front are not marked as spam in your recipient's inbox or caught in their spam filters.
If you are using SMTP channels in Front, we strongly recommend that you authorize SendGrid to send emails on your behalf by setting up specific SendGrid SPF/DKIM entries in your DNS configuration. This will improve email deliverability, avoid messages being marked as spam, and remove the "via sendgrid.net" that appears next to the sender email address in your sent emails.
We will display warnings to keep this top of mind if you have not configured your SPF/DKIM records for channels that require them. If you are using a Google Group or other channel using email redirection, you should add SPF/DKIM records for your domain. If you are using a Gmail personal account channel, or Office365 sync channel, you do not need to worry about SPF/DKIM records as we rely on the Gmail and Office365 APIs to send and receive email.
Whenever there are missing SPF/DKIM records for a team SMTP channel, all members of the team will see prominent warnings in the app indicating this setup step has not been completed.
Follow these steps to add your SPF/DKIM records for each domain you are using to send emails from Front. There is one Deliverability settings page visible to company admins where you can configure records for all your email domains in one place. If you are not a company admin, you will not see this settings page and will need to get your admin’s help.
Click the gear icon on the top right of Front and into the Company settings tab.
Click on the Deliverability tab. Here, company admins can configure SPF/DKIM records. This page will only be visible to company admins after they add at least one team SMTP channel.
Note: If you do not see the Deliverability tab, it is likely because only individual inboxes have been added which require these DNS records to be configured. If this is the case, you will find the records listed in the Channels settings for the inbox, under Improve delivery rates - SPF / DKIM.
You will see a list of your SMTP channel domains under Domains on the left. Any email domains with missing SPF/DKIM records will have a yellow warning icon.
Add your SPF/DKIM records for each channel with a warning icon. The instructions are specific to the DNS provider you use. Here are instructions for the most popular types:
If you have another DNS provider not listed above, see this section for general tips on how to add the records to your DNS.
When you’ve successfully added the SPF/DKIM records and you click the Check DNS settings button, the warning icon will be removed from the channel name in the list and the DNS records will say Verified.
Whenever there are missing SPF/DKIM records for an individual SMTP channel using a domain that isn't present in the Deliverability tab, Company Admins will find the DNS records in a different location.
Click the gear icon on the top right of Front and into the Company settings tab. Go to the Teammates section and select the teammate.
Go to the teammate's Individual inboxes settings, and select the inbox that contains the SMTP channel.
Go to the inbox's Channels settings, and expand the channel settings for the SMTP channel.
Scroll to the Improve delivery rates - SPF / DKIM setting. Expand the setting, and add the configure the records.
DMARC is an optional deliverability record unrelated to Front that your IT team may already have in place. Learn more about how DMARC DNS records work with Front in our Front email deliverability and DMARC records article.
Tips for adding DNS records
Each DNS provider has their own format of how the records should be entered, but here are some general tips on how to enter Front's records that should apply to most DNS settings:
- 1st DNS Record: The Value that you copy into your DNS settings should not include the 100 in the beginning nor the period (.) at the end.
- 2nd DNS Record: The Name field that we display lists the subdomain before your actual domain name, so in the example screenshot in Step 5 above, the DNS subdomain field you enter would be front-mail. Do not include your own domain name.
- 3rd DNS Record: Similar to the 2nd DNS Record in the Name field, the subdomain is the part before your own domain name.
If an SMTP channel uses an email domain that does not have SPF/DKIM records set, a warning will appear in your inbox where that channel is housed. When you click into the inbox, there will be a banner across the top explaining the issue.
If you are a Company Admin, the banner warnings will be linked to your Deliverability settings page, where you can configure your SPF/DKIM records.
If you are a Team Member or Team Admin, you will get a popup with a template email to send to your IT team and your admin because you do not have the appropriate permissions to make these changes.
A warning icon will also be shown on the inbox in your inbox settings. This will be shown for all team SMTP channels and individual inboxes where the SMTP channel is the same domain as a team channel. If you have set up an individual inbox with a different email domain (i.e. a “non-work” email), these warnings will not be displayed.
Note: Wix, HostGator, SiteGround and Squarespace don't support creating the required MX record. If you need to use one of these DNS providers, we recommending configuring custom SMTP for these channels to send mail via your own mail servers, using your existing DNS records.
I already have MX records in place - do I still need to add Front's MX record?
Yes. The MX DNS record that Front asks you to configure is different from your "core" existing MX record.
Your existing MX record will have a host value of @ - this is what mail servers use to determine how to direct mail addressed to your domain to the right place. The MX record Front asks you to configure has a host value of front-mail. This record sits in a different place, and will not impact your inbound message flow.
When configuring these three DNS records for Front, you should be adding three new records, not modifying any existing records.
Shana Eccles Adding these records will not affect the amount of spam you receive. The records affect the deliverability of the messages you send only. You can take a look at our Understanding Front's spam feature guide to understand how spam works with Front.