How can I fix alignment issues?

Still have a question, spotted an error, or have a better explanation or a source we should cite?

You've got two main paths to fix alignment. Most organizations go with DKIM alignment because it's more reliable and survives forwarding. The other option is SPF alignment, but it's trickier to set up and often breaks when mail gets forwarded.

Path 1: DKIM Alignment (recommended) Ask your ESP to provide CNAME records that let them sign your outgoing mail with your domain as the d= tag. Once you add those CNAME records to your DNS, the ESP will sign with something like d=yourdomain.com instead of d=theirservice.com. Your DKIM signature now matches your From header, and alignment passes. This is the industry standard because it's forwarder-friendly and doesn't require Return-Path tweaks.

Path 2: SPF Alignment Configure a custom Return-Path on your domain (same root domain as your From header). Your ESP needs to support this, and you'll need DNS changes to make it work. The downside: forwarding often breaks this setup because it changes the Return-Path.

So Start with how third-party senders affect alignment to understand exactly which fix your ESP supports. Then use what domain is checked for DKIM alignment to verify your setup works.

Contributors

Who worked on this answer

Every name links to their profile. Every company links to their site. Real people, real accountability.

Ask an AI · tailored to your setup

Show me how to fix alignment

Explain the two methods to fix DMARC alignment: DKIM alignment with CNAME records and SPF alignment with custom Return-Path. Include why DKIM is preferred, how ESPs implement each, and why forwarding matters.

Edit the yellow boxes, then send to the AI of your choice.