4mail.ing

Brevo DNS Configuration Tutorial

How to Configure a Domain Name for Brevo

Domain authentication improves deliverability and protects your domain from spoofing. This guide walks you through adding the required DNS records (Brevo code, DKIM, DMARC) and optional branding records, using a real example.

In short: add your domain in Brevo → copy the DNS records it shows → create the same records at your domain provider → wait for propagation (up to 48 hours) → click Authenticate in Brevo.

Before you start

You can only authenticate a domain that you (or your business) own and control. Free addresses such as Gmail or Yahoo cannot be authenticated.

A domain you control

You need access to the DNS settings of the domain (registrar or DNS host).

A Brevo account

Log in and open Settings → Senders, Domains, IPs → Domains.

15–30 minutes

Plus up to 48 hours for DNS changes to propagate worldwide.

Official docs: This tutorial is based on Brevo’s domain authentication guide and a real configuration export.

Step 1 — Add the domain in Brevo

  1. Open the Domains page

    In Brevo, click your account menu → Settings → Senders, Domains, IPs → Domains (or go directly to the Domains list).

  2. Add or authenticate the domain

    Click Add a domain. If the domain is already listed, click Authenticate next to it.

  3. Enter the domain name

    Use the part after the @ in your sending address. Example: for hello@motivateca.com the domain is motivateca.com.

  4. Choose authentication method

    Prefer Authenticate the domain automatically when available — Brevo connects to many registrars and adds the records for you. Use Authenticate the domain yourself (manual) if automatic setup is not supported or you prefer full control.

Step 2 — Authentication records

These three record types are required for domain authentication. Brevo shows the exact values for your domain; the table below uses a real example (motivateca.com).

Purpose Type Name / Host Value
Brevo code
Proves you own the domain		 TXT @
(or blank / domain name)		 brevo-code:a38b4398ae5dc8128662532b1cfc0a42
DKIM 1
Email signature (key 1)		 CNAME brevo1._domainkey b1.motivateca-com.dkim.brevo.com
DKIM 2
Email signature (key 2)		 CNAME brevo2._domainkey b2.motivateca-com.dkim.brevo.com
DMARC
Policy for failed authentication		 TXT _dmarc v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com
Important: Values are unique per domain. Always copy the values shown in your own Brevo account — do not reuse the example above on another domain.
@ host tip: Some providers do not accept @. In that case leave the host empty, or enter the full domain name (e.g. motivateca.com), depending on what your provider asks for.

Step 3 — Branding records (recommended)

Branding records make links and images in your emails use your domain instead of a generic Brevo hostname. They improve consistency and trust.

Purpose Type Name / Host Value
Branded CNAME em em-motivateca-com.r.brand.brevosend.com
Redirection CNAME r.em em-motivateca-com.r.brand.brevosend.com
Image redirection CNAME img.em em-motivateca-com.img.brand.brevosend.com

Again: copy the exact values from your Brevo domain setup screen. The hostnames above are specific to motivateca.com.

Step 4 — How to add the records at your provider

Exact UI labels differ by registrar, but the process is always the same:

  1. Open DNS management

    Log in to the place that hosts DNS for your domain (often the registrar: Cloudflare, GoDaddy, Namecheap, Route 53, OVH, Aruba, etc.).

  2. Create each record

    For every row Brevo shows:

    • Choose the correct Type (TXT or CNAME).
    • Set Name / Host exactly as shown (or follow the @ tip above).
    • Paste the Value / Target / Points to without extra spaces or quotes (unless the provider requires quotes for TXT).
    • Leave TTL at the default (often 3600 or “Automatic”).
    • Save.

  3. Do not delete existing records you still need

    Adding Brevo records is usually additive. Only replace a DMARC record if you intentionally want Brevo’s policy; otherwise merge policies carefully.

Common providers

Cloudflare GoDaddy Namecheap Amazon Route 53 Google Domains / Squarespace OVH Aruba Register.it Other / generic

Brevo’s help center includes provider-specific click-paths for many of these.

Step 5 — Verify and wait for propagation

  1. Return to Brevo and click Authenticate

    On the domain page, run the authentication check. If records are visible, status will turn to authenticated.

  2. Allow time for DNS propagation

    Changes can take from a few minutes up to 48 hours. If verification fails immediately after saving, wait and try again later.

  3. Confirm status in Brevo

    When successful you should see the domain marked as authenticated (and branded, if you added branding records).

Tip: You can double-check public DNS with tools such as dnschecker.org or dig / online TXT/CNAME lookup sites.

Full example: motivateca.com

Below is the complete set of records exported for this domain once configured in Brevo. Use it only as a reference for structure — always copy live values from your account.

Authentication

Type Name Value
TXT @ brevo-code:a38b4398ae5dc8128662532b1cfc0a42
CNAME brevo1._domainkey b1.motivateca-com.dkim.brevo.com
CNAME brevo2._domainkey b2.motivateca-com.dkim.brevo.com
TXT _dmarc v=DMARC1; p=none; rua=mailto:rua@dmarc.brevo.com

Branding

Type Name Value
CNAME em em-motivateca-com.r.brand.brevosend.com
CNAME r.em em-motivateca-com.r.brand.brevosend.com
CNAME img.em em-motivateca-com.img.brand.brevosend.com

FAQ & troubleshooting

Authentication still fails after 24–48 hours

Double-check that Type, Name and Value match Brevo exactly (no extra spaces, no wrong host). Confirm the records are published on the authoritative nameservers for the domain. If you use Cloudflare or a CDN, ensure the record is not proxied when it should be DNS-only (especially CNAMEs).

My provider does not accept “@” as the name

Leave the host field blank, or enter the bare domain name, according to your provider’s documentation. The TXT value itself stays the same.

I already have a DMARC record

Brevo may offer to replace it. If you keep your existing policy, make sure it is compatible and that authentication still passes. For many senders, p=none is a safe starting point while monitoring reports.

Do I need SPF as well?

Brevo’s documented authentication flow focuses on Brevo code, DKIM and DMARC. Your overall sending setup may still benefit from a correct SPF record that includes Brevo’s include mechanism if required by your configuration — follow the SPF guidance shown in your Brevo account when present.

Are branding records mandatory?

No. Authentication (Brevo code + DKIM + DMARC) is what makes the domain verified. Branding records are recommended so links and images use your domain.

Where is the official Brevo article?

Authenticate your domain with Brevo (Brevo code, DKIM, DMARC)

Open official Brevo guide

Need the domain prepared for you? Contact Ontiscal.