Wix: DKIM and SPF setup

Before you start

This guide covers mail from Wix Email Marketing and from automations that send an email. You need access to the DNS settings of example.com. Wix's pages do not name a Wix role or plan for the setup.

Where example.com is registered decides who adds the records:

• Bought through Wix, or connected to Wix's name servers. Wix says authentication starts by itself. If it did not, add the records in your Wix account (see Check it worked).
• Connected by pointing, or registered elsewhere. Your DNS records stay with your domain host. Add the records there.

Turn on DKIM

Wix calls this authenticating your domain. It gives you a list of CNAME records.

1. Go to Email Marketing in your site's dashboard.
2. Under Sender Details on the right, click Manage Senders. If you entered an address before, click the Edit icon instead.
3. Enter a sender's name and, as Reply-to email, an address at example.com. Click Save.
4. Enter the confirmation code Wix sends to that address, and click Confirm.
5. Under Domain status, which shows Not authenticated, click Authenticate this domain. Wix shows the CNAME records.
6. Sign in at your domain host, open its DNS settings, and add each CNAME record exactly as shown.

Wix's own example names are s1._domainkey.example.com and sg.example.com. If your DNS host adds example.com to every name, enter only s1._domainkey and sg. The records for your site may differ, so copy them from Wix. Wix's pages do not say what each record is for.

About the DMARC record. Wix says one of the records, which it calls CNAME 5, sets up DMARC for example.com. If example.com already has a DMARC record, it sends reports to your reporting address. A name can hold a CNAME or a TXT record, not both. If CNAME 5 is for _dmarc.example.com, it would take the place of your record, and reports would stop reaching your reporting address. Wix's pages do not give that record's name. Check it before you add it, and leave out a CNAME for _dmarc.

Sign with your own domain

Wix says that until example.com is authenticated, it adds an authenticated Wix domain to your sender details, such as ascendbywix.com or wixemails.com. Mail sent that way authenticates as Wix's domain, not as example.com. Authenticate example.com as in Turn on DKIM.

Use your own bounce domain

Wix's pages describe one set of CNAME records for authentication and no separate bounce domain setting. Add all the records Wix shows, as in Turn on DKIM.

SPF

Wix's Email Marketing pages ask for no change to the SPF record of example.com. The records Wix lists are all CNAMEs.

Check it worked

1. Wix says the records take a few hours, and up to 24 hours, to take effect. Check Domain status under Sender Details in the Email Marketing dashboard. Refresh the page to see the current status.
2. If example.com is managed in your Wix account and did not authenticate by itself: in Email Marketing, click Manage Senders, then View DNS records, and copy the records. Go to Domains in your Wix account, click the Domain Actions icon next to example.com, and click Manage DNS records. For each record, click + Add Record under its type, enter it, click Save, then Save Changes. Wix lets you edit one record at a time.
3. Most mailbox providers send one report a day. Reports from the next 24 to 48 hours show whether DKIM aligns for Wix.

Wix's pages: Authenticating your custom email domain and Troubleshooting the authentication process of your domain.