Klaviyo authentication uses a dedicated sending domain: in Klaviyo, set one up and publish the CNAME records it provides (DKIM selectors plus the branded sending subdomain). This aligns DKIM and SPF to your domain so Klaviyo email passes DMARC.
In Klaviyo: Settings → Email → Dedicated Sending Domain. Enter a subdomain (e.g. send.yourdomain.com) and Klaviyo generates several CNAMEs to publish.
Add every CNAME to your DNS and click Verify in Klaviyo. Until it’s verified, Klaviyo sends from a shared domain that won’t align with DMARC.
Check one of the provided selectors:
$ dig CNAME kl._domainkey.yourdomain.com +shortCheck your SPF record now
Open the free SPF checker →For Klaviyo, yes in practice — it’s what aligns authentication to your domain. Without it, DMARC can fail on alignment even when SPF/DKIM “pass.”
