Introduction
This article
explains how to locate, view, and extract the DNS Records generated by SendGrid for
Domain Authentication.
Why Domain Authentication is Required
Domain Authentication helps:
Verify ownership of the sending domain
Improve email deliverability
Reduce spoofing and phishing risks
Authenticate messages using SPF and DKIM standards
Prerequisites
- Access to
SendGrid with Admin permissions
- Target Domain
- DNS Provider access
Step-By-Step Process
Select Settings > Sender Authentication.
Click
Authenticate Your Domain.

Select a DNS Provider or Other Host.

Enter
domain details and continue.

Review
and copy the generated DNS records.

Add them
to your DNS provider.
Return to
SendGrid and click Verify.
Expected Outcome
The Domain's Status shows Verified and SPF/DKIM authentication is enabled.
Troubleshooting
Ensure the records are an exact match, then wait for DNS propagation and verify no conflicts exist.
Host Name | Type | Value
|
em123.example.com | CNAME | u123.wl.sendgrid.net |
s1._domainkey | CNAME | s1.domainkey.u123.wl.sendgrid.net |
Verification Failed
Verify the following:
DNS records match the values provided
by SendGrid.
No typographical errors exist.
DNS propagation has completed.
Existing
DNS records do not conflict with the new records.
Partial Verification Success
If only some records are verified:
Wait for DNS propagation to complete.
Retry the verification process.
Check with your DNS provider for
propagation status
Disclaimer
This document is intended for informational and guidance
purposes only. The procedures described in this document are based on standard
Twilio SendGrid Domain Authentication functionality available at the time of
publication. User interfaces, menu options, DNS requirements, and platform
features may change without prior notice.