Troubleshooting Failed Domain Authentication

After adding your SPF, DKIM, or DMARC records to your DNS, the Mailzzy verification check should confirm them as active. If verification is still failing, this guide covers the most common causes and how to resolve each one.

Before Troubleshooting: Allow Time for DNS Propagation

DNS records do not take effect instantly. After you add or change a record, the update needs to propagate across the global DNS network. This process typically takes between 15 minutes and a few hours but can occasionally take up to 48 hours depending on your DNS provider and the TTL (Time to Live) settings of your existing records.

If you just added a record and Mailzzy’s verification check is failing, wait at least 2 hours before beginning to troubleshoot.

Issue 1: The Record Was Published Under the Wrong Name / Host

This is a very common mistake. When adding the DNS record, just copy and paste the host value exactly as given (like delivery.yourdomain.com or just “delivery”) into the Host/Name field.

Before saving, quickly double-check that the final record doesn’t repeat your domain (for example: _dmarc.yourdomain.com.yourdomain.com).

Issue 2: The Record Value Was Copied Incorrectly

Copy-and-paste errors are a frequent source of failed authentication. A single missing character, extra space, or broken quote can invalidate a DNS record.

• Return to Mailzzy > Senders, Domains & Dedicated IPs > Domains and copy the record value directly from the platform

• Paste it into a plain text editor first to confirm there are no line breaks or hidden formatting characters before adding it to your DNS

• Double-check the value currently in your DNS against what Mailzzy shows

Issue 3: The Record Has Not Propagated Yet

If you added the record less than 48 hours ago and the check is still failing, it may simply not have propagated to the DNS servers Mailzzy queries. Use a free DNS lookup tool such as MXToolbox or Google’s G Suite Toolbox (search for “DNS lookup tool”) to query your domain and confirm whether the record is visible from external DNS servers.

Issue 4: Your DNS Provider Does Not Support Long TXT Records

Some DNS providers impose a character limit on TXT record values. DKIM public keys in particular can be long enough to exceed this limit. If your provider has a 255-character restriction, you may need to split the record into multiple quoted strings. Consult your provider’s help documentation for the correct formatting.

Still Not Resolving?

If you have worked through all of the above and verification is still failing, contact the Mailzzy support team at support@mailzzy.com. Include the following information to help the team investigate quickly:

• Your domain name

• A screenshot of the DNS record as it appears in your DNS provider’s dashboard

• The DNS provider you are using