Why use a dedicated sending domain
Private sender reputation
Branded email headers
Full authentication control
Better inbox placement
Choosing a subdomain
Use a subdomain of your primary business domain rather than your root domain. This keeps your email sending reputation separate from your website, so a deliverability issue with email does not affect other domain-linked services. Recommended subdomain formats:mail.yourdomain.comemails.yourdomain.comsend.yourdomain.comno-reply.yourdomain.com
Setting up your dedicated domain
Go to email services settings
Add your subdomain
mail.yourdomain.com).Choose your configuration method
Add the required DNS records
Verify your domain
Set as default sending service

DMARC policy configuration for the sending domain
DNS records explained
SPF (Sender Policy Framework)
SPF authorizes the platform’s sending servers to send email on behalf of your subdomain. The record is a TXT entry on the subdomain itself. Only the authorized servers listed in the SPF record will pass SPF checks — all others will fail.DKIM (DomainKeys Identified Mail)
DKIM attaches a cryptographic signature to every outgoing email. The receiving server uses a public key (published in your DNS) to verify the signature was created by an authorized sender and that the message was not modified in transit. The platform generates your DKIM key pair and provides the DNS record to publish.DMARC (Domain-based Message Authentication)
DMARC tells receiving mail servers what to do when an email fails SPF or DKIM checks. It also provides reporting so you can monitor authentication failures. Recommended DMARC policy progression:sp= tags.MX record
The MX record for your sending subdomain points bounce notifications and auto-replies back to the platform’s bounce processing servers. This is required for accurate bounce tracking in your campaign statistics.SSL certificate
Once your dedicated domain is verified, an SSL certificate is automatically provisioned. This enables secure email headers and HTTPS for tracking pixels and click-redirect URLs, which some email clients and security gateways require.Domain warm-up
A newly configured sending domain has no historical reputation with inbox providers. Sending large volumes immediately from a new domain results in poor inbox placement because providers have no data to trust the domain on. Warm-up approach:- Start with small daily sends (100–500 emails per day)
- Gradually increase volume over 4–6 weeks
- Send exclusively to your most engaged contacts first (recent openers and clickers)
- Monitor bounce rates, spam complaint rates, and open rates closely throughout the warm-up period
Monitoring domain health
Once your dedicated domain is active, monitor its reputation using: Google Postmaster Tools — Connect your domain to see Gmail-specific metrics including spam rate, domain reputation (Bad / Low / Medium / High), and IP reputation. Accessible from Settings > Email Services. Microsoft SNDS — Connect Microsoft’s Smart Network Data Services to monitor your sending IP’s reputation as seen by Outlook and Hotmail. Also available from email service settings. Both tools provide early warning of deliverability problems before they result in widespread inbox rejection.Multiple subdomains
You can add multiple dedicated sending domains to one account — for example:marketing.yourdomain.comfor promotional campaignstransactions.yourdomain.comfor receipts, confirmations, and notifications
Frequently asked questions
Do I need a dedicated domain, or can I use Gmail or Outlook?
Do I need a dedicated domain, or can I use Gmail or Outlook?
How long does DNS verification take?
How long does DNS verification take?
Can I use my root domain instead of a subdomain?
Can I use my root domain instead of a subdomain?
Do I need to warm up my domain if I am migrating from another sending service?
Do I need to warm up my domain if I am migrating from another sending service?
What DMARC policy should I start with?
What DMARC policy should I start with?
p=none to enable monitoring without blocking any messages. Review the DMARC reports over 4–6 weeks to confirm all legitimate sending sources are authenticated correctly. Then move to p=quarantine, and finally to p=reject once you are confident all legitimate sends are passing authentication.Can I connect a dedicated IP to my sending domain?
Can I connect a dedicated IP to my sending domain?