Understanding Mailchimp (Intuit) Email Authentication
Mailchimp requires custom domain authentication for all senders with custom domains to ensure DMARC alignment.
When Mailchimp (Intuit) delivers outbound emails on your behalf, recipient mail transfer agents (MTAs) at Google, Yahoo, Microsoft, and corporate mail gateways inspect the sender identity. Without a published SPF record explicitly permitting Mailchimp (Intuit)'s IP ranges, these emails trigger SPF Softfail (~all) or Hardfail (-all), severely degrading domain reputation and inbox placement.
Required DNS Records for Mailchimp
Publish the following DNS records in your domain registrar or DNS management console (Cloudflare, AWS Route 53, GoDaddy, Namecheap):
| Type | Host / Name | Value / Target | TTL | Purpose |
|---|---|---|---|---|
| TXT | @ | v=spf1 include:servers.mcsv.net ~all | 3600 | Authorizes Mailchimp servers. |
| CNAME | k2._domainkey | dkim2.mcsv.net | 3600 | Mailchimp DKIM key 1. |
Step-by-Step Setup Instructions
Open Mailchimp > Domains > Start Authentication.
Copy the two CNAME DKIM records (k2._domainkey and k3._domainkey).
Add both CNAME records into your DNS zone.
Add "include:servers.mcsv.net" to your root SPF TXT record.
Click Authenticate in Mailchimp.
Common Mailchimp SPF Configuration Mistakes
× Duplicated Domain in Host
Cause: Entering k2._domainkey.domain.com in DNS.
Fix: Enter only k2._domainkey.
Frequently Asked Questions
What is the SPF include for Mailchimp?
The SPF mechanism is "include:servers.mcsv.net".