Domain authentication

Before you can send mail from your own domain, you need SPF, DKIM, and DMARC records published at your DNS provider. Pulse verifies each record automatically and reports pass/fail in near-real-time.

Add a domain

Go to Settings → Domains → + Add domain.
Enter the apex domain you will send from (e.g. yourbrand.com).
Pulse generates the three records below. Copy each to your DNS zone.

Records

SPF

TXT  @    v=spf1 include:amazonses.com ~all

Tells receiving servers which IPs are authorized to send for your domain.

DKIM

Three CNAME records of the form:

CNAME  abc._domainkey.yourbrand.com → abc.dkim.amazonses.com

Cryptographically signs each outbound message so receivers can verify it wasn't tampered with.

DMARC

TXT  _dmarc   v=DMARC1; p=none; rua=mailto:dmarc@yourbrand.com

Tells receiving servers what to do when SPF or DKIM fails, and where to send aggregate reports. Start with p=none, graduate to p=quarantine, then p=reject once reports are clean.

Verification

Click Verify after publishing records. The verify-domain edge function queries DNS and updates the status. DNS propagation can take up to 24 hours; Pulse re-checks every few minutes until it succeeds.

Domain health dashboard

The main dashboard shows a summary card with SPF, DKIM, and DMARC pass counts across all your domains. Red means action required — click through to the Domains settings page for details.

Sending from a sub-domain (e.g. mail.yourbrand.com) insulates your corporate mail reputation from marketing activity. Pulse supports both apex and sub-domain setups.

)