---
title: "Add a DKIM record at STRATO, plus SPF and DMARC"
date: "2026-11-06"
author: RocketCart
url: "https://getrocketcart.com/docs/sending-domain/strato/"
type: docs
---

To send RocketCart emails from a STRATO domain, add RocketCart’s TXT records under **TXT- und CNAME-Records** in the domain’s DNS settings. STRATO’s login is in German; the labels below are the ones STRATO shows. STRATO also sets its own SPF and DMARC rules, so read the sections on those before you start.

## The records RocketCart needs

| Record | Type | Präfix | Value |
| --- | --- | --- | --- |
| SPF | TXT | empty | `v=spf1 include:mailgun.org ~all` |
| DKIM | TXT | `<selector>._domainkey` | `v=DKIM1; k=rsa; p=<your public key>` |
| DMARC | TXT | `_dmarc` | `v=DMARC1; p=none` |

- Copy every value from the **DNS records** panel in RocketCart (**Settings > Email Settings**). Click **Copy value** on each tab. `<selector>` and `<your public key>` are unique to your store. If the app shows the literal word `<selector>` in Host/Name, your selector is your store name as RocketCart saved it on install: lowercase letters and numbers, hyphens between words, for example `my-store` for “My Store”.
- STRATO calls the host field **Präfix** and adds your domain itself. Leave it empty for the domain itself, and type only the prefix for the others.

## How do I add a TXT record at STRATO?

1. Log in to the STRATO customer login.
2. Go to **Domains > Domainverwaltung**.
3. Click the gear icon (**Zahnrad**) next to your domain.
4. Open the **DNS** tab.
5. Next to **TXT- und CNAME-Records**, click **verwalten** (manage).
6. Click **Weiteren Record erstellen** (create another record).
7. In **Präfix**, enter the prefix from the table, or leave it empty for the SPF record.
8. Choose **TXT** as the type.
9. In **Wert** (value), paste the value you copied from RocketCart.
10. Click **Einstellung übernehmen** (apply).
11. Repeat for the DKIM record. For DMARC, see below first.

Warning

Records only work where your domain’s DNS is managed. If your domain’s nameservers point to another company (for example your web host), add the records there instead.

## What if I already have an SPF record?

A domain can only have one SPF record. With two, both fail. If you already have a TXT record that starts with `v=spf1`, edit that one instead of adding a new one. Put `include:mailgun.org` **before** the `~all` or `-all` at the end:

|  | Value |
| --- | --- |
| Your record now | `v=spf1 include:_spf.strato.com ~all` |
| After your edit | `v=spf1 include:_spf.strato.com include:mailgun.org ~all` |

Keep every service your record already lists. Only add `include:mailgun.org`.

Mail servers stop reading an SPF record at `~all` or `-all`, so an include placed after it is ignored. If the value RocketCart suggests ends with `include:mailgun.org`, move that part in front of `~all` when you paste it.

STRATO’s own SPF setting (**STRATO SPF-Regel**) also matters:

- When you save your own SPF record, STRATO switches its setting to **Keine STRATO SPF-Regel** (no STRATO SPF rule).
- If you also send email through STRATO’s mail servers, keep `include:_spf.strato.com` in your own record, as in the example. STRATO says to use `include:` rather than `redirect=` when other senders are involved.

## What about DMARC at STRATO?

STRATO turns on its own DMARC rule by default. RocketCart accepts any valid DMARC record, so you can keep STRATO’s rule and skip RocketCart’s DMARC record.

If you’d rather use RocketCart’s value, first switch the DMARC setting to **Keine STRATO-DMARC-Regel** (no STRATO DMARC rule), then add a TXT record with the prefix `_dmarc` and the value `v=DMARC1; p=none`.

## Verify the records in RocketCart

1. In RocketCart, go to **Settings > Email Settings**.
2. In the **DNS records** panel, click **Verify DNS**.
3. When all three tabs show **Verified** (**Status: 3/3 DNS records verified.**), turn on **Enable custom domain**.

STRATO says DNS changes can take up to 24 hours to be fully active. RocketCart only checks when you click **Verify DNS**, so click it again later if a record still shows **Missing**. The full flow is in [Set up a custom sending domain](/docs/sending-domain/set-up-sending-domain/). If a record won’t verify, see [Sending domain not verifying](/docs/troubleshooting/sending-domain-not-verifying/).