Setting Up Domain Authentication (SPF, DKIM, DMARC)

To ensure your emails land in your customers' inboxes and not their spam folders, you must authenticate your sending domain. This process proves to email providers (like Gmail and Yahoo) that Cavaco AI is authorized to send emails on your behalf.

This involves adding three types of DNS records to your domain provider (e.g., GoDaddy, Namecheap, Cloudflare):

• SPF (Sender Policy Framework): Specifies which IP addresses and/or domains are authorized to send email on behalf of your domain.
• DKIM (DomainKeys Identified Mail): Adds a cryptographic signature to emails, verifying they were sent from your domain and haven't been altered.
• DMARC (Domain-based Message Authentication, Reporting, and Conformance): Tells receiving servers what to do if an email fails SPF or DKIM checks.

1. Access Your Domain Settings in Cavaco AI

1. Log in to your Cavaco AI dashboard.
2. Navigate to Settings > Domains in the left sidebar.
3. Click + New Domain to add your sending domain (e.g., yourbrand.com).
4. Once added, click on your domain to view the required DNS records.

2. Configure DNS Records Automatically (Recommended)

Cavaco AI integrates with Entri to automatically configure your DNS records for supported providers.

1. On the Domain Details page, look for the DNS Records section.
2. Click the Configure Automatically button (marked with a rocket icon).
3. A secure popup will appear. Follow the prompts to log in to your domain provider.
4. Review the proposed changes and click Approve.
5. The records will be added to your DNS settings automatically.

3. Configure DNS Records Manually

If your provider isn't supported by the automatic configuration, or if you prefer to add them yourself, you can do so manually.

1. On the Domain Details page, you will see tables for DKIM, DMARC, SPF, and Receiving (MX) records.
2. Log in to your domain provider's dashboard (e.g., GoDaddy, Cloudflare) in a separate tab.
3. Navigate to your DNS settings or DNS management page.
4. For each record listed in Cavaco AI, create a new record in your provider's dashboard:
   • Type: Select the type (e.g., TXT, CNAME, MX).
   • Host/Name: Copy the "Host" value from Cavaco AI.
   • Value/Target: Copy the "Value" from Cavaco AI.
   • TTL: Set to 3600 (or 1 hour).
   • Priority (MX only): Set to 10.
5. Save your changes in your provider's dashboard.

4. Verify Authentication

DNS changes can take anywhere from a few minutes to 48 hours to propagate across the internet.

Once you've added the records (automatically or manually), Cavaco AI will periodically check them. When the records are successfully verified, the status next to your domain will change to "Verified", and you are ready to start sending emails.