Domain Setup
Verify your sending domain with DKIM and SPF for reliable email delivery.
Before you can send newsletters to your subscribers, you need to verify a custom sending domain. Verification proves to receiving mail servers — and to Distill — that you own the domain you are sending from. Without it, your emails have a much higher chance of being rejected or marked as spam, and Distill will block the send.
Why domain verification matters
Email providers like Gmail, Outlook, and Apple Mail use domain authentication to decide whether to trust an incoming message. Two key authentication mechanisms are SPF and DKIM:
- SPF (Sender Policy Framework) specifies which servers are allowed to send email from your domain. A TXT record in your DNS tells receiving servers that Distill is an authorized sender for your domain.
- DKIM (DomainKeys Identified Mail) attaches a cryptographic signature to outgoing emails. Receiving servers verify the signature against a public key published in your DNS, confirming the message was not altered in transit.
Together, SPF and DKIM improve deliverability, build sender reputation, and protect your domain from spoofing.
Before you start
You need:
- A domain you own and can manage DNS records for (for example,
yourdomain.com). - Access to your DNS provider (GoDaddy, Namecheap, Cloudflare, Route 53, etc.).
- A sending subdomain you want to use (for example,
newsletters.yourdomain.com). Using a subdomain keeps your main domain's reputation separate from your newsletter sending.
Add a sending domain in Distill
- Open your workspace in Distill and click the Settings icon (Settings) in the sidebar.
- Select Sending Domain.
- Click Add domain.
- Enter your sending subdomain (for example,
newsletters.yourdomain.com) and click Continue.
Distill generates the DNS records you need to add. You will see:
| Type | Host | Value |
|---|---|---|
| TXT | newsletters.yourdomain.com | v=spf1 include:amazonses.com ~all |
| CNAME | mail._domainkey.newsletters.yourdomain.com | <unique-key>.dkim.amazonses.com |
Keep this page open — you will copy these values into your DNS provider.
Add DNS records
Log into your DNS provider and add the records shown in Distill:
SPF record (TXT)
- Create a new DNS record.
- Set the type to TXT.
- Set the host/name to
newsletters.yourdomain.com(some providers require onlynewslettersrelative to the root domain). - Set the value to
v=spf1 include:amazonses.com ~all. - Save the record.
DKIM record (CNAME)
- Create a new DNS record.
- Set the type to CNAME.
- Set the host/name to
mail._domainkey.newsletters.yourdomain.com(some providers require onlymail._domainkey.newsletters). - Set the value to the CNAME target shown in Distill (a long string ending in
.dkim.amazonses.com). - Save the record.
DNS changes can take up to 48 hours to propagate globally, though most providers update within a few minutes. Do not attempt to send newsletters until verification is confirmed in Distill.
Verify the domain
After adding your DNS records, return to Distill:
- Go to Settings > Sending Domain.
- Click Check verification status.
Distill checks your DNS records and updates the status:
- Verified — Both DKIM and SPF records are found and correct. You are ready to send.
- Pending — Records have not yet propagated. Wait a few minutes and check again.
- Failed — Records could not be found or contain errors. Double-check the values in your DNS provider.
Once verified, your domain status shows a green checkmark and you can send newsletters from that domain.
Troubleshooting verification failures
If verification keeps failing after 48 hours:
- Check for typos — Compare the DNS values in your provider exactly against the values shown in Distill. DKIM CNAME targets are long and easy to truncate accidentally.
- Check TTL — Some DNS providers cache records. Set TTL to 300 seconds (5 minutes) while verifying, then increase it after verification passes.
- Check subdomain format — Some DNS providers automatically append your root domain to the host value. If the full expected record is
mail._domainkey.newsletters.yourdomain.com, you may only need to entermail._domainkey.newslettersin the host field. - Multiple SPF records — If you already have an SPF TXT record on
newsletters.yourdomain.com, you cannot add a second one. Instead, merge theinclude:amazonses.cominto your existing record.
If you are stuck, contact support at support@distill.ink with your domain name and your DNS provider — the team can usually identify the issue from a DNS lookup.
Re-verification after DNS changes
If you later modify your DNS records (for example, migrating to a different DNS provider), your domain may lose its verified status. Distill will alert you by email and in the dashboard. Re-run the verification process to restore sending access.