Introduction
HubSpot handles both marketing and sales email for many companies. Both flows need DMARC alignment. This article covers the setup.
Why this topic matters
HubSpot defaults to signing with hs-sender.com. That fails DMARC alignment with your From domain. Custom DKIM fixes it.
How to enable custom DKIM in HubSpot
- HubSpot admin → Settings → Domains & URLs → Email Sending Domain.
- Add your domain.
- HubSpot generates DKIM and SPF records to publish.
- Publish the CNAMEs and TXT.
- Verify in HubSpot.
SPF setup
HubSpot publishes SPF includes:
“text v=spf1 include:43445803.spf01.hubspotemail.net include:_spf.google.com -all “
Specific include domain depends on HubSpot account region.
Step-by-step approach
- Configure custom email sending domain in HubSpot.
- Publish required DNS records.
- Verify in HubSpot admin.
- Watch DMARC reports for HubSpot pass rate.
- Confirm both marketing and sales flows are aligned.
Best practices
- Verify both marketing and sales are using the custom domain.
- Use HubSpot's "sending domain" for all outbound flows.
- Pair with SPF discipline — watch lookup count.
- Test with both transactional and marketing sends.
- Document the selector in your runbook.
Recommended next step
For HubSpot users, configure custom email sending domain this week. Required for DMARC alignment.
FAQ
Does HubSpot Sales need separate DKIM?
Uses the same custom sending domain. Verify both flows.
What about HubSpot's CRM-driven outreach?
Same configuration. Custom sending domain handles all flows.
Can I use a subdomain for HubSpot?
Yes — common to dedicate a subdomain (mail.brand.com) to HubSpot.
How does HubSpot interact with BIMI?
Once DMARC is at enforcement, BIMI works for HubSpot-sent mail.
What if multiple HubSpot accounts?
Each can use a different selector under the same domain.
Final thoughts
HubSpot + DMARC works cleanly with the custom email sending domain configuration. Set up once; covers all HubSpot-driven flows.