Video guide: How to manually authenticate your domain in Squarespace

This guide walks you through how to manually add your DKIM, SPF, and DMARC authentication records in Squarespace to verify your custom domain in Flodesk.

Prefer to skip the manual steps? You can also automatically authenticate your domain using the Entri integration.

Squarespace automatically appends your domain name to the end of DNS records. This means you'll need to remove your domain name from the Host field when adding each record, and use only the short host values below:

If you enter the full value copied from Flodesk without trimming the domain name, the record won't work correctly.

Video: How to manually authenticate your domain in Squarespace:

1. Log in to your Flodesk account.

2. Navigate to My Account > Domain setup.

1. On your domain card, click Authenticate now.

2. Select I'll do it manually.

3. Click Next.

Flodesk will display all the authentication records you need to add. Depending on your account type, you'll see one of the following:

Option A: Five DNS records

• One SPF record

• Three DKIM records (all three must be added)

• One DMARC record

Option B: Three DNS records

• One SPF record

• One DKIM record

• One DMARC record

Here's how each record type gets added in Squarespace:

Important: Flodesk provides CNAME SPF records, which are not the same as the TXT SPF records that other email service providers may give you. Always add the Flodesk-specific CNAME SPF record as a separate new DNS record. Do not combine it with any existing TXT SPF records.

Important: Your domain can only have one DMARC record. If a DMARC record already exists in your Squarespace DNS settings, skip adding the DMARC record shown in Flodesk. The one Flodesk provides is intended for members who haven't set up a DMARC policy yet.

Repeat the steps below for each record shown in Flodesk (SPF, each DKIM record, and DMARC):

1. In Flodesk, click the Copy button next to the Host value for the record you're adding.

2. In a new browser tab, log in to your Squarespace account and go to Domain Overview > DNS settings.

3. Scroll down to the Custom Records section and click Add Record.

4. Paste the Host value into the Host field. Then remove your domain name from the end of the value (for example, enter fdesp not fdesp.yourdomain.com).

5. Under Type, select CNAME for SPF and DKIM records, or TXT for the DMARC record.

6. Go back to Flodesk, copy the corresponding Points to value, and paste it into the Data field in Squarespace.

7. Click Save.

8. Repeat for each remaining record.

1. Once all records are added in Squarespace, head back to Flodesk.

2. Click Next, then Done.

Flodesk will begin monitoring your DNS records automatically.

DNS changes don't take effect right away. Here's what to expect:

• Full authentication can take up to 48 hours.

• Your domain status will show as Pending in the meantime.

• It's common to see DKIM and DMARC verify first, while SPF can take a little longer. A Partially authenticated status during this window is completely normal.

You don't need to repeat any steps or re-enter records while propagation is in progress.

If your domain isn't verified after 48 hours, review the recommended troubleshooting steps. For additional help, reach out to the Flodesk support team at support@flodesk.com.

Why do I need to remove my domain name from the Host field in Squarespace
Squarespace automatically appends your domain name to the end of DNS records. If you paste the full value from Flodesk without trimming it, your domain name ends up duplicated (for example, fdesp.yourdomain.com.yourdomain.com), which will cause the record to fail. Use only the short host values: fdesp for SPF, fde._domainkey for DKIM, and _dmarc for DMARC.

What type should I select for each record in Squarespace?
Select CNAME for your SPF and DKIM records, and TXT for your DMARC record.

I already have a DMARC record in Squarespace. Do I need to add the one from Flodesk?
No. Your domain can only have one DMARC record. If one already exists in your Squarespace DNS settings, skip the DMARC record shown in Flodesk. Adding a second DMARC record can cause conflicts and break authentication.

I already have a TXT SPF record from another provider. Should I replace it with the Flodesk one?
No. Flodesk uses a CNAME SPF record, which works differently from TXT SPF records. Add the Flodesk CNAME SPF record as a separate new record. Do not replace or merge it with any existing TXT SPF records.

Why does my domain show as "Pending" or "Partially authenticated" after I've added all the records?
DNS changes can take up to 48 hours to propagate. DKIM and DMARC typically verify faster, while SPF can take a bit longer. Both statuses are normal during this window. You don't need to redo any steps. Check back after 24 to 48 hours.

My domain still isn't verified after 48 hours. What should I do?
The most common cause with Squarespace is that the domain name wasn't removed from the Host field when adding records. Double-check each record and make sure the Host values match exactly: fdesp, fde._domainkey, and _dmarc. If everything looks correct and verification still hasn't completed, review the recommended troubleshooting steps or reach out to the Flodesk support team at support@flodesk.com.

Can I use automatic authentication instead of doing this manually?
Yes. If you'd rather skip the manual steps, Flodesk's Entri integration can add your DNS records automatically. From your domain card, click Authenticate now and select Automatically authenticate. Learn how to automatically authenticate your domain.