# Add MailBlastr DNS records on AWS Route 53

> Publish the SPF, DKIM, and DMARC records MailBlastr generates for your domain in an AWS Route 53 hosted zone.

This guide walks through adding the DNS records MailBlastr generates for a domain in an **AWS Route 53** hosted zone. Add your domain in MailBlastr first to generate the records — see [Managing domains](https://www.mailblastr.com/docs/domains/managing) — and keep the [DNS records](https://www.mailblastr.com/docs/domains/dns) reference open for your exact DKIM record and region.

You need a Route 53 **public hosted zone** for your domain, with your registrar’s nameservers pointed at it. (MailBlastr’s sending region and your Route 53 hosted zone are independent — Route 53 is global DNS regardless of which region your mail goes through.)

## Open the hosted zone

1. **Open Route 53** — In the AWS Console go to **Route 53 → Hosted zones** and click the hosted zone for your domain.
2. **Create records** — Click **Create record**. Use **Quick create record** to add several records on one screen, or create them one at a time.
3. **Add each record** — For each entry below set **Record name**, **Record type**, and **Value**, then **Create records**. Repeat for all six.

> **Warning:** In Route 53 the **Record name** is the subdomain portion; the console shows your domain as a fixed suffix beside the input. Enter `mailblastr._domainkey`, `send`, and `_dmarc` — do not retype `.yourdomain.com`. Leave the record name blank only for the apex (you won’t need that here).

## DKIM — TXT

Add **one** TXT record holding your domain’s DKIM public key.

**DKIM — TXT**

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `Record type` | TXT | No | A single DKIM key record. |
| `Record name` | mailblastr._domainkey | No | Combined with the zone suffix this is `mailblastr._domainkey.yourdomain.com`. `mailblastr` is the fixed selector MailBlastr uses. |
| `Value` | v=DKIM1; k=rsa; p=<public key> | No | The DKIM key record holding your domain’s public key. |
| `TTL` | 300 | No | Route 53 default (seconds). |

## SPF — MX + TXT on send.yourdomain.com

MailBlastr uses the custom MAIL FROM subdomain `send.yourdomain.com`. Set the **Record name** to `send` for both records. In Route 53 the MX **priority is part of the value** — enter it as `10 feedback-smtp.<region>.amazonses.com`. Wrap the TXT value in double quotes.

**SPF — MX**

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `Record type` | MX | No | Receives bounce and complaint feedback for the MAIL FROM subdomain. |
| `Record name` | send | No | Resolves to `send.yourdomain.com`. |
| `Value` | 10 feedback-smtp.us-east-1.amazonses.com | No | Priority and host on one line — `10` is the priority. Replace `us-east-1` with your domain’s region. |
| `TTL` | 300 | No | Route 53 default. |

**SPF — TXT**

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `Record type` | TXT | No | SPF policy for the MAIL FROM subdomain. |
| `Record name` | send | No | Same host as the MX — resolves to `send.yourdomain.com`. |
| `Value` | "v=spf1 include:amazonses.com ~all" | No | Authorizes Amazon SES for the MAIL FROM subdomain. Route 53 requires TXT values in double quotes. |
| `TTL` | 300 | No | Route 53 default. |

## DMARC — TXT on _dmarc.yourdomain.com

**DMARC — TXT**

| Name | Type | Required | Description |
| --- | --- | --- | --- |
| `Record type` | TXT | No | DMARC policy record. |
| `Record name` | _dmarc | No | Resolves to `_dmarc.yourdomain.com`. |
| `Value` | "v=DMARC1; p=none;" | No | A monitoring policy to start with. Keep it in double quotes. |
| `TTL` | 300 | No | Route 53 default. |

> **Note:** Route 53-specific gotchas: TXT values **must be double-quoted**; the MX **priority goes inside the value** (`10 host`), not a separate field; and confirm your registrar’s nameservers actually point at this hosted zone (Route 53 → hosted zone NS records) or nothing you add here resolves publicly.

Route 53 applies changes within a minute, though resolver caches honor the TTL. Once all six records exist, return to MailBlastr and [re-verify the domain](https://www.mailblastr.com/docs/api/domains-verify).