Understanding Brevo (formerly Sendinblue) Email Authentication
Brevo provides transactional email and SMS automation with dedicated DKIM signing and SPF authorization.
When Brevo (formerly Sendinblue) delivers outbound emails on your behalf, recipient mail transfer agents (MTAs) at Google, Yahoo, Microsoft, and corporate mail gateways inspect the sender identity. Without a published SPF record explicitly permitting Brevo (formerly Sendinblue)'s IP ranges, these emails trigger SPF Softfail (~all) or Hardfail (-all), severely degrading domain reputation and inbox placement.
Required DNS Records for Brevo
Publish the following DNS records in your domain registrar or DNS management console (Cloudflare, AWS Route 53, GoDaddy, Namecheap):
| Type | Host / Name | Value / Target | TTL | Purpose |
|---|---|---|---|---|
| TXT | @ | v=spf1 include:spf.sendinblue.com ~all | 3600 | Brevo SPF. |
Step-by-Step Setup Instructions
Log into Brevo > Senders & IP > Domains > Add domain.
Add TXT for mail._domainkey with DKIM key.
Add "include:spf.sendinblue.com" to root SPF.
Click Authenticate in Brevo.
Common Brevo SPF Configuration Mistakes
× Brevo Code Missing
Cause: Omitting brevo-code TXT validation record.
Fix: Add brevo-code TXT.
Frequently Asked Questions
Is Sendinblue SPF the same as Brevo?
Yes, both use "include:spf.sendinblue.com".