Squarespace Domains
Add the DKIM, return-path and DMARC records usend shows in Squarespace Domains.
This page shows where the records go in Squarespace Domains and its quirks. Menu labels change over time; if yours differ, look for the DNS records list of the domain.
Before you start
- Add the domain in usend (Domains, or
POST /domains). usend shows the exact records for it, and the values are unique to your domain, so copy them from there. - Find where the domain's DNS is hosted. DNS is edited at whoever runs the domain's nameservers, which is not always the registrar you bought it from. If it is not Squarespace Domains, follow that provider's guide instead.
The records
usend shows this set of records. Names are relative to your domain, acme.com in the example.
| Record | Name | Type | Value |
|---|---|---|---|
| DKIM | rs1._domainkey | TXT | v=DKIM1; k=rsa; p=MIIB... (long, unique to your domain) |
| Return path and SPF | send and/or send-ses | CNAME | the host usend shows, for example rp-ses-us-east-1.usend.et |
| DMARC (recommended) | _dmarc | TXT | v=DMARC1; p=none; |
| Receiving (only if you enabled it) | @ | MX | the host usend shows, priority 10 |
The domain's page lists one return-path CNAME for each sending transport enabled on usend, so you may see send, send-ses or both. Add every one that is shown. The MX and SPF records for the return path live behind that CNAME, so you do not add a separate MX or SPF record for sending, and your own SPF record at the root does not need to change. See Custom return path to choose another label, and DMARC before you tighten the policy.
Only add the receiving MX record if you turned on receiving. An MX at the root sends all mail for that name to usend. Use a dedicated subdomain if the domain already receives mail elsewhere.
Add them in Squarespace Domains
Sign in to Squarespace, open Domains, click the domain and then DNS Settings (called DNS in newer panels). It applies to domains managed by Squarespace Domains (formerly Google Domains).
Under Custom records choose Add record, pick the type, enter the Host and Data and save.
The Host is relative to your domain: rs1._domainkey. Use @ for the domain itself.
Add the DKIM TXT record, each return-path CNAME and the DMARC TXT record.
Squarespace Domains-specific notes
- If the domain is connected to a Squarespace website, leave the default website records alone; they do not conflict.
- Do not use the Email presets for Google Workspace or Microsoft 365: they change the root MX.
- If your domain already has a DMARC record, keep it: you only need one, and usend accepts any record that starts with
v=DMARC1.
Verify
Back in usend, press Verify on the domain (or POST /domains/{id}/verify). usend checks with public DNS resolvers, so it sees what other mail servers see. Records usually show up within minutes; some providers take longer. Each record gets its own status, and usend keeps re-checking for 24 hours.
If a record stays pending or failed, see Domain not verifying. Background: Verify a domain.