Is DMARC record really as simple as it sounds?

Shopify Discussion
,
41

We’re still waiting for them to be validated…

1 Like
42

Hi! Email Deliverability Specialist from Shopify here. Thank you so much for your questions. Just reading through the questions and comments in this particular post, so appreciate your patience as I go through the threads. The required DKIM and SPF records we mentioned are covered the 4 CNAME records we ask you to add :+1:

2 Likes
43

Just wanted to state that the rua field (for receiving DMARC reports) is not a required part of having a DMARC record.

2 Likes
44

Hello LitnutsMO! You’re correct, anything outside of the v= and p= part of the DMARC record are not required (i.e. rua= is a feature if you want it).

And yes, I would strongly recommend that people starting with DMARC start with a p=none policy, as any emails that you are sending that are not successfully DKIM / SPF authenticated can fail DMARC and accidentally get caught in the p=quarantine or p=reject rules. This can be a very likely scenario for senders who are using multiple sending platforms such as Shopify, Google Workspace, Klayvio, Mailchimp, etc. as each of those sending platforms will need to have authentication setup correctly (aka be authorized to send emails on your behalf).

45

Hi Outofdarkness! If you purchased your domain through Shopify, you should not have received an email about needing to make any changes since we will be handling all the required changes on your behalf before Gmail and Yahoo’s February 1, 2024 deadline. Please let us know if this is not the case.

1 Like
46

For Shopify, the required DKIM and SPF records are part of the 4 CNAME records we provide as part of your authentication step. More information on setting this up is available for you here: https://help.shopify.com/en/manual/intro-to-shopify/initial-setup/setup-your-email#authenticate

2 Likes
47

I just got DMARC set up on our Namecheap domain. It was a straightforward process:

  1. Login to the main dashboard

  2. Click the Manage button next to the domain

  3. Click on the Advanced DNS tab

  4. At the bottom of the records list, click on + Add new record

  5. From the popup, scroll down and select TXT Record

  6. Fill in the new form on the right with these exact files

  • Host:
_dmarc​
  • Value:
v=DMARC1; p=none;​
  • Leave Automatic selected for the TTL
  1. Click on the :white_check_mark:

From there, you can verify that things are working properly by sending a test email from the Shopify admin. In Gmail, you can click <> Show original on the email, and you should see something like this, confirming that it all works:

ianks88_1-1705801603267.png
ianks88_1-1705801603267.png1542×848 66.5 KB

48

I have a really basic question regarding this
if the record is
Name of TXT record = _dmarc.YOURDOMAINGOESHERE.com
Value of TXT record = v=DMARC1; p=none; rua=mailto:YOUR@EMAILGOES.HERE

Do we need to repeat it for every email used on the domain?

49

@juenology Shopify said the deadline was Feb 1, but (just another in the long list of bad surprises from Shopify) they replaced our domain authenticated “from” address today, Jan 24, instead of sticking to the the Feb 1 deadline they’ve been telling us and everybody. So now we’re scrambling to add DMARC (which can’t be done before 48+ hours verifying DKIM and SPF…).

Another unsurprising bad surprise from Shopify: support pages on this are lacking, to say the least, and chatting with “support” is only fruitless and frustrating.

Can someone from Shopify confirm that this is what we need to include in SPF record in order to be able to send emails from our already authenticated domain in shopify as well as thru GoogleWorkspace?

v=spf1 include:_spf.google.com include:shops.shopify.com ~all

https://community.shopify.com/c/announcements/google-and-yahoo-new-email-deliverability-requirements/td-p/2367825?syclid=cmoln5oklmts73d979u0&utm_campaign=gmail_yahoo&utm_content=no_auth_no_dmarc&utm_medium=email&utm_source=mozart

50

Now that I did this and I am receiving emailed reports… what do I do with them? Thank you for your help!

51

Your reply is a godsend. Thanks!

A quick follow-up question. Do we need to add more DMARC for each email address we use to send customer email from Shopify?

In your example, you had [email removed] for this entry

Value of TXT record = v=DMARC1; p=none; [email removed]

If you have another email 'order* @StephensWorld .ca",*do you need to add another DMARC? Really appreciate it!

52

good question. you will need to check the data and decide if you want to make any action on them. i made a video on this and we recommend easydmarc to help you understand this data without having to read these xml files. see tutorial at https://www.youtube.com/watch?v=BBy6jBT4pPk . the topic is full of detail but in particular minute 21:48 will answer your question.

1 Like
53

I had to be the one to say it… but chatgpt helped me out when ALL other customer service reps either didn’t know what they were talking about or simply couldn’t be bothered.

  1. Tell chatgbt you need to setup SPF,DKIM,DMARC
  2. Tell it your domain
  3. Tell it your domain provider
  4. Create a new mainbox for dmarc reports ie. reports@(yourdomain.com)
  5. Generally chatgbt would have explained eveyrything at this point and your good to go.

Check to make sure all it workign with

Dmarc - https://dmarcian.com/dmarc-inspector/

Dkim - https://dmarcian.com/dkim-inspector/

SPF - https://dmarcian.com/spf-survey/

Considering how worrying this is so close to the 1st of Feb… very very weak effort from shopify interms of support.

Also if your using klayivo make sure to follow their setup instructions ; https://academy.klaviyo.com/2024-new-sender-requirements-checklist/1817230

Thanks & hope this helps

54

I would like to know if we need to add another DMARC if we have another email. Some of our team told me that their email are bouncing back after I made changes.

55

I was able to set up our primary domain, but does anyone know if we need to do anything with the subdomain?

For example, our primary domain is xyz@company.com for our DTC store, and we have wholesale.xyz@company.com for B2B store. We are using Klaviyo for both stores. For the subdomain, I’m having an issue with the verification on Klaviyo. When I try to add a CNAME Record, this error shows up: “Unique signature error, a record with this value already exists and Name must be unique for non MX records” - I’ve already added the same value and Name when I set up for our primary domain, so that’s causing an issue. I’ve reached out to Klaviyo and they escalated my case to the Deliverability and Compliance specialist team. (I’m honestly surprised that they didn’t have an answer for this…) I haven’t heard back from them yet :disappointed_face:

56

Stephen,

I am having similar issues. My shop is shop.fosterscreations.us I was using sfoster @fosterscreations.us for my Shopify correspondence. The problem is I can only have one set of DMARC Records . I utilize that email for mailchimp and have created the DMRC records to their specifications. Shopify is still saying no records found so I changed my shop correspondence and send to customer email to shop @fosterscrestions.com (as that domain permanently redirects to fosterscreations.us and I can have multiple email addresses there. My fosterscreations.us email is with Office 365 via godaddy and the plan only allows 1 email for the account) is there a way to use the same DMARC records for Shopify and Mailchimp? I can’t ask Mailchimp as my plan does not come with email support. I am about to give up on the hole thing and have my customer emails come from Shopify.

57

Ok this is what I have for my fosterscreations.us

what do I need to add so that shop.fosterscreations.us is covered see attached photo

IMG_6552.png
IMG_6552.png2778×1940 370 KB

58

do you mean the email wholesale@xyz.company.com?

also because you have a subdomain, make sure that your add to your dmarc the sp= to specify rules for subdomains

59

In my case everything is setup and verified that is working correctly, mails are getting through, verification shows correct. However, In the reports I get spf fail entries. Tracing the IPs from the request, they all point to mailer.shopify.com. I wasn’t sure if I need to update my domain spf record to add that url. Shopify support was useless - they didn’t even knew the difference between dmarc and spf. My email was setup via godaddy and microsoft, so in the spf record I only had the microsoft server entry. Do you kno if I should add the “mailer.shopify.com”? Shopify suggested to add shops.shopify.com, but that did not fix the spf fail in the reports.

149.72.122.254 1 none pass fail

149.72.122.254 points to o33.mailer.shopify.com

1 Like
60

commenting to try to boost this – about to face the same issue

shopify, are you listening at all? support pages and support staff are woefully inadequate (again)…not to mention that you didn’t even stick to the Feb 1 deadline you told us but instead stopped sending shopify emails from our already-authenticated domain on Jan 24