Set Up Domain Verification for Custom 'From Email' Addresses

Verify your domain to enable authenticated email sending and improve deliverability.

Understanding Domain Verified Sending

Authentication of your domain is crucial for ensuring that messages from Unificus reach your clients’ inboxes instead of being flagged as spam or blocked entirely. By verifying your domain, you authorize Unificus to send emails on your behalf.

Why Domain Verification Matters

Scammers frequently impersonate legitimate companies by spoofing email addresses—pretending to be PayPal, banks, or other trusted organizations. DKIM (DomainKeys Identified Mail) signatures combat this threat by cryptographically proving your emails are authentic.

When your domain is verified:

DKIM signing adds a digital signature to outbound messages, signaling to email providers that the message is legitimate
ISPs and email services recognize your authorization for Unificus to send on your behalf, directing messages to inboxes rather than spam folders

Steps to Verify Your Domain

1. Access Email Branding Settings

Click your profile picture in the top right corner to open the menu, then select Email Branding under Your Branding.

2. Select Domain Verified Sending

Locate and click the Domain Verified Sending option.

3. Enter and Save Your Domain

Type your domain name and click Save Domain.

Your domain will be locked for 24 hours to prevent conflicts with automated processes. You’ll then receive DNS records to add to your domain’s DNS zone.

4. Add DNS Records to Your Domain

Don’t worry—we’ll walk you through it!

Locating Your DNS Zone

To add the required records, you first need to find where to edit your domain’s DNS settings. The fastest way is to identify your domain’s nameservers using the Whois lookup tool.

Using Whois to Find Your Nameservers:

Visit https://whois.com/whois/, enter your domain name, and click Search.

Your nameserver values typically reveal your hosting provider:

GoDaddy — Look for ‘domaincontrol.com’
Bluehost — Look for ‘bluehost.com’
HostGator — Look for ‘hostgator.com’
SiteGround — Look for ‘siteground.biz’
InMotion — Look for ‘inmotionhosting.com’

Accessing Your DNS Manager:

Log in to your hosting provider’s control panel and find the Manage DNS or Edit DNS Zone section for your domain.

Once you locate the interface, add the records as specified (these vary by domain). DKIM records are added as TXT records, while Return-Path records are added as CNAME records.

Resources for Common Hosting Providers:

Adding DKIM and Return-Path Records

DKIM Record Setup

A DKIM record must be added to your DNS as a TXT record.

Log in to your hosting provider or DNS service
Create a new TXT record using the Host and Value provided in your Unificus account
Set the TTL to 1 hour (any value works, but 1 hour is standard)

Within 48 hours, your DKIM record will be automatically verified. Once verified, all messages sent through Unificus from your domain will carry a DKIM signature.

Return-Path Record Setup

A Return-Path record must be added to your DNS as a CNAME record.

Log in to your hosting provider or DNS service
Create a new CNAME record using the Hostname and Value shown on your DNS Settings page

Within 48 hours, your Return-Path will be automatically verified.

Understanding Return-Path

The Return-Path specifies where bounces and email feedback are directed. It’s also known as:

Bounce address
Reverse path
Envelope from
MAIL FROM

While a custom Return-Path isn’t required and won’t typically affect deliverability, it’s essential if your domain has a DMARC policy. Without domain alignment between your Return-Path and From address, SPF authentication may fail for DMARC purposes.

Example: If you send from example.com but set Return-Path to pmbounces.example.com, the domains align, allowing SPF and DKIM to pass DMARC validation.

Your email header will display:

Return-Path: <pm_bounces@pmbounces.example.com>

Creating a Custom Return-Path

In your DNS, create a CNAME record for your Return-Path domain pointing to pm.mtasv.net.