Klaviyo Connect Domain: 7 Simple DNS Setup Steps to Boost Deliverability
Struggling with low open rates or seeing “via klaviyomail.com” in your sender name? The most overlooked fix in email marketing is properly authenticating your domain. Without it, your emails are more likely to land in spam, your brand looks unpolished, and your sender reputation takes a hit with every send.
- Why Klaviyo domain authentication is essential for deliverability
- The role of SPF, DKIM, DMARC, and CNAME records in protecting your brand
- 7-step walkthrough to connect your domain in Klaviyo
- DNS setup instructions for GoDaddy, Cloudflare, Shopify, and Namecheap
- How to verify your domain and troubleshoot common DNS errors
- Post-setup monitoring and domain health best practices
Why Connecting Your Domain in Klaviyo Matters
Properly authenticating your Klaviyo sending domain with SPF, DKIM, and a branded CNAME enhances deliverability, fortifies your sender reputation, and removes the generic Klaviyo branding from your emails. It’s one configuration step that keeps paying dividends on every single send.
Authenticating your sending domain signals legitimacy to mailbox providers — helping your messages land in the inbox rather than the spam folder.
Replace the generic Klaviyo sender label with your own brand name — making every email look professionally polished and fully brand-owned.
Authentication prevents spoofing and phishing under your brand name — protecting your domain reputation and deliverability long-term.
Authenticated domains enable custom CNAME click tracking — so links look like click.email.yourbrand.com instead of a Klaviyo default URL.
Gmail and Yahoo now require authenticated domains via SPF and DKIM for bulk senders. Setting this up keeps you compliant and out of deliverability penalties.
Before your first campaign, before BFCM or high-volume periods, and before switching to a dedicated sending setup to maintain consistency.
DNS Records You Need to Connect Your Domain in Klaviyo
You don’t need to add SPF or DKIM records manually — Klaviyo’s NS or CNAME records enable them automatically for your branded domain. Here’s what each record does and how it fits into the setup:
Authorises Klaviyo’s servers to send email on behalf of your domain. Enabled automatically when you add Klaviyo’s NS or CNAME records — no separate SPF record needed.
Adds a digital signature to every email proving it wasn’t tampered with in transit. Also enabled automatically through Klaviyo’s NS or CNAME records.
Required for Gmail and Yahoo bulk senders. Add a DMARC TXT record outside Klaviyo directly in your DNS. Klaviyo provides a sample policy (p=none) during setup to get you started.
Used in Static routing (3 CNAME records). Points your branded domain to Klaviyo’s infrastructure. Required if your DNS provider doesn’t support NS records (e.g. BigCommerce).
One TXT record Klaviyo provides to verify you own the domain. Required alongside your NS or CNAME records before verification can complete.
Dynamic vs Static Routing: Which Should You Choose?
- Uses 4 NS records pointing to Klaviyo name servers
- Klaviyo manages SPF, DKIM, and updates automatically
- Less ongoing maintenance — Klaviyo handles infrastructure changes
- Best choice for most brands unless you have a specific single-provider requirement
- Uses 3 CNAME records to route through a single provider
- Required for BigCommerce (NS records not supported)
- Manual updates needed if Klaviyo changes infrastructure
- Choose if your DNS provider doesn’t support NS record delegation
Root Domain vs Subdomain: Which Should You Use?
| Option | Example | Pros | Cons |
|---|---|---|---|
| Root Domain | brand.com |
Simpler setup, unified branding | Higher risk if deliverability suffers — affects website too |
| Subdomain (Recommended) | email.brand.com |
Keeps email traffic separate from web traffic, easier to isolate issues | Slightly more technical to configure |
email.brand.com for all Klaviyo marketing sends. If deliverability issues ever occur, they stay isolated to email — your root domain reputation and website remain unaffected.
How to Connect Your Domain in Klaviyo: 7 Steps
These steps are adapted from Klaviyo’s official branded sending domain guide and apply to GoDaddy, Cloudflare, Shopify, Namecheap, and most other DNS providers.
Navigate to Domain Settings in Klaviyo
Log in to your Klaviyo account. Go to Settings → Domains (sometimes labelled “Email → Sending Domains” in newer layouts). Click Add Domain.
Enter Your Sending Domain
Enter your root domain, then set your sending subdomain (e.g. email.yourbrand.com). Choose Dynamic routing unless your provider doesn’t support NS records — then select Static.
Copy the DNS Records Klaviyo Generates
Klaviyo will generate either 4 NS records (Dynamic) or 3 CNAME records (Static) for authentication, plus 1 TXT record for domain ownership verification. You can also optionally add a DMARC record at this stage.
Log In to Your DNS Provider
Access your DNS management dashboard from your domain registrar or hosting provider. The exact location varies by platform — see the provider-specific instructions in the next section.
Add Each DNS Record Exactly as Shown
Paste each record from Klaviyo into your DNS provider. Follow these rules to avoid the most common errors:
- Host/Name: Enter only the subdomain prefix (e.g.
emailnotemail.yourbrand.com) — most providers append the root domain automatically - Value/Target: Copy directly from Klaviyo — one character wrong breaks verification
- Paste as plain text: No extra spaces, quotation marks, or trailing characters
- Propagation time: Allow up to 48 hours — most records update within a few hours
Type: TXT
Host: _dmarc
Value: v=DMARC1; p=none; rua=mailto:dmarc@yourbrand.com
Verify Your Domain in Klaviyo
Return to Klaviyo and click Verify. DNS changes can take up to 24 hours to propagate (48 hours in rare cases). If any records fail, Klaviyo will highlight exactly which ones need attention.
Apply Your Domain as the Default Sending Domain
Once all checks show green, click Apply Domain. All future sends will now come from your authenticated branded domain. If you also want branded click tracking links (e.g. click.email.yourbrand.com), enable Klaviyo’s Dedicated Click Tracking during the same session.
DNS Setup Instructions by Provider
Here’s exactly where to add your Klaviyo DNS records across the most popular platforms — each with a direct link to their official documentation.
send, not the full subdomain).How to Confirm Your Domain Is Verified in Klaviyo
After adding DNS records, use these four methods to confirm everything is working correctly before you send your first campaign from the new domain.
spf=pass, dkim=pass, and dmarc=pass — all three passing confirms your domain is fully authenticated.Fixing Common Klaviyo Domain Setup Errors
DNS quirks and provider limitations cause most setup problems. Here’s a quick-reference guide to the most common issues, their causes, and how to fix them:
| Issue | Likely Cause | Fix |
|---|---|---|
| DNS not propagating after 48 hours | Old TTL values caching stale records | Lower TTL to 300 before making changes; flush DNS cache and re-check with MXToolbox |
| Incorrect Host/Name format | Entered full domain instead of just prefix | Use only the subdomain prefix (e.g. send, not send.yourbrand.com) |
| Records showing Proxied in Cloudflare | Orange cloud icon toggled on | Click the orange cloud to switch to “DNS only” (grey cloud) for all Klaviyo records |
| DMARC alignment failure | From domain doesn’t match sending domain | Ensure your From address uses the same domain as your authenticated sending domain |
| NS records not supported | Provider (e.g. BigCommerce) doesn’t allow NS | Switch to Static routing in Klaviyo and use CNAME records instead |
| Underscores in CNAME not allowed | DNS provider restriction on CNAME hosts | Contact your DNS provider — some require special configuration or switching providers |
| TXT record conflict | Existing TXT records at same host | Add Klaviyo’s TXT value alongside existing values — multiple TXT records at the same host are allowed |
| “via klaviyomail.com” still showing | Domain not yet applied as default | Return to Settings → Domains and click Apply Domain after verification completes |
Post-Setup Monitoring and Domain Health Best Practices
Connecting your domain is step one. Maintaining it is an ongoing discipline — these habits protect your sender reputation long after the initial setup.
- Monitor weekly: Track open, click, bounce, and complaint rates. Sudden drops often signal deliverability issues before they become critical
- Enable Smart Sending: Prevent over-emailing by enabling Smart Sending for all campaigns and flows to reduce fatigue and complaint rates
- Reverify after provider changes: If you move your domain from GoDaddy to Cloudflare or any other provider, re-verify in Klaviyo immediately
- Remove cold contacts: Suppress contacts who haven’t engaged in 90–180 days to protect your sender score and list health
- Test authentication periodically: Run SPF, DKIM, and DMARC checks using MXToolbox quarterly — authentication records can break after DNS changes
- Warm up before high-volume sends: Ramp up sending gradually before major campaigns like BFCM to avoid triggering spam filters with sudden volume spikes
Frequently Asked Questions About Connecting Your Domain in Klaviyo
Key Takeaways
- Authenticate early: Set up SPF, DKIM, and CNAME before your first campaign — not after your deliverability suffers.
- Use a subdomain: Keep marketing emails on
email.brand.comseparate from your root domain to protect website reputation. - Copy records exactly: Paste DNS records from Klaviyo as plain text — one typo breaks verification and blocks your entire send.
- Add DMARC separately: Klaviyo doesn’t add this for you. Add a DMARC TXT record directly in your DNS — required for Gmail and Yahoo bulk senders.
- Verify and monitor: Use Klaviyo’s built-in checker plus MXToolbox and Google Postmaster Tools to stay on top of domain health.
- Re-verify after changes: Switching DNS providers or registrars requires a fresh verification in Klaviyo to prevent delivery gaps.