Skip to content
MailPush Docs

Verify a domain

MailPush only sends from domains your account has verified. Verifying a domain means publishing two DNS records. Mailbox providers read them to check that the email really comes from you.

Add the domain

Section titled “Add the domain”

  1. In the dashboard, open Domaines (domains) and enter the domain of your sender addresses, for example example.com. To send from hello@mail.example.com, add mail.example.com.

  2. Publish the records shown on the domain’s page at your DNS provider. With OVH, the page also gives the lines to paste in the zone’s text mode.

  3. Leave the page open. It checks the records every 20 seconds and the status becomes Vérifié (verified) once both required records resolve. DNS changes usually take a few minutes, sometimes up to an hour.

The records

Section titled “The records”
Record Type Name Value Required
DKIM TXT mailpush._domainkey.example.com The public key shown in the dashboard, starting with v=DKIM1 Yes
Return path CNAME mp-bounces.example.com bounces.mailpush.app Yes
DMARC TXT _dmarc.example.com v=DMARC1; p=none; Only if you have none

DKIM holds the public half of a key generated for your domain. MailPush signs every email with the private half, which never leaves its servers.

The return path is where bounces go. Because it is a CNAME to MailPush, it also covers SPF: you do not add MailPush to your own SPF record.

DMARC tells mailbox providers what to do with email that fails both checks. If your domain already has a DMARC record, keep it and do not add a second one.

When verification fails

Section titled “When verification fails”
The page says What to do
Absent (missing) The record does not resolve yet. Check the name: some providers append the domain themselves, so mailpush._domainkey is enough.
Valeur différente (different value) Another value is published under that name. Replace it with the one shown.
En double (duplicate) Two DKIM or two DMARC records exist under the same name, and mailbox providers then ignore both. Delete the extra one.

A domain sends only while it is verified. Opening its page runs the check again. If a required record is gone, the status changes to En échec (failed) and the API answers domain_not_verified for that domain until the record is back.

Next steps

Section titled “Next steps”