Short answer: For SPF, add the TXT record v=spf1 redirect=_spf.yandex.net (use include:_spf.yandex.net if other services also send for you). For DKIM, copy the value from your domain's DKIM signature section in the Yandex 360 admin panel and publish it as the mail._domainkey TXT record. Finally, turn on DMARC with a _dmarc TXT record.
Yandex 360 SPF record
If you send only through Yandex:
| Type | Host / Name | Value |
|---|---|---|
| TXT | @ | v=spf1 redirect=_spf.yandex.net |
redirect hands the SPF decision entirely to Yandex's record, so no other mechanisms are added next to it. If another source also sends mail for your domain, use include instead of redirect:
| Type | Host / Name | Value |
|---|---|---|
| TXT | @ | v=spf1 ip4:SERVER_IP include:_spf.yandex.net ~all |
Yandex 360 DKIM setup
- Sign in to the Yandex 360 admin panel (admin.yandex.com).
- Under Domains, select your domain and copy the value in the DKIM signature section.
- Add this record to your DNS:
| Type | Host / Name | Value |
|---|---|---|
| TXT | mail._domainkey | v=DKIM1; k=rsa; t=s; p=MIGfMA0G... (value from the panel) |
- Once the record propagates, the panel shows the signature as active. Yandex's selector is
mail; our checker tries it automatically.
MX record
For Yandex 360 the MX record should be mx.yandex.net (priority 10). Look up your MX record to make sure no old hosting record is left behind.
Alongside Yandex's built-in spam filtering, you can put an email security gateway in front of it if you need a central quarantine for every mailbox.
DMARC record for Yandex 360
DMARC is added directly in DNS, independent of your mail provider. Once SPF and DKIM work, start with this record:
| Type | Host / Name | Value |
|---|---|---|
| TXT | _dmarc | v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com |
p=nonefor 1-2 weeks: the aggregate reports show every source sending mail as your domain. If anything besides Yandex 360 sends for you (invoicing, CRM, newsletter tool), add it to SPF/DKIM too.p=quarantine: mail that fails authentication goes to the recipient's spam folder.p=reject: mail that fails is refused outright. This is the strongest protection against spoofing of your domain.
Use a dedicated mailbox for the report address (rua); reports are XML files and arrive frequently. Gmail, Yahoo and Microsoft all require at least p=none from bulk senders.
How to verify the setup
- Enter your domain in the SPF, DKIM, DMARC checker and make sure all three records show green.
- Send a test message to a Gmail address, open it and choose ⋮ → Show original. You should see
PASSfor SPF, DKIM and DMARC. - Paste the headers into the email header analyzer to read the details in a friendly format.
Protect your inbox from spam, malware and phishing: point your MX record to Spambil and try it free for 7 days. No credit card required.
Frequently asked questions
Should I use redirect or include for Yandex SPF?
If Yandex is your only sending source, redirect=_spf.yandex.net. If there are other sources, combine them in one record with include:_spf.yandex.net.
The DKIM value is too long and my DNS panel won't accept it.
Some panels require TXT values longer than 255 characters to be split into quoted chunks. Split the value into two parts, entered as "..." "...", or check your DNS host's documentation.