Issue
You get the following error when trying to send emails using SendGrid:
The from address does not match a verified Sender Identity. Mail cannot be sent until this error is resolved. Visit https://sendgrid.com/docs/for-developers/sending-email/sender-identity/ to see the Sender Identity requirements
What is a Verified Sender Identity?
A Sender Identity identifies the "From" email address that your recipients see when you send emails. To help maintain a good sender reputation and ensure legitimate sending practices, we require you to verify your Sender Identities through your account. This verification is necessary for all Twilio SendGrid accounts to send emails. There are two ways to verify a Sender Identity:
Domain Authentication:
Domain Authentication is our recommended form of verification. It requires access to the DNS settings of your domain, but it will allow us to generate the SPF and DKIM records required to tell email providers that we are allowed to send emails on behalf of your domain. When a domain is authenticated, you can send emails using any address at your domain. We have more information on how to set up Domain Authentication here.
Single Sender Verification:
Single Sender Verification is a fast way to verify your Sender Identity when you don’t have access to the DNS settings for your domain. Since this option does not provide the DNS records necessary for good deliverability, it is recommended for testing purposes, but not necessarily for production mail send. This option allows email sending only from the address that was verified. We have more information on how to set up Single Sender Verification here.
Product
Twilio SendGrid (Email)
Cause
These errors occur when attempting to send from an email address that doesn't belong to a Verified Sender. All mail sent through your account must contain a Verified Sender, or a sender using an Authenticated Domain, in the 'From' field.
Resolution
1. Decide on Verification Method:
- Single Sender Verification:
- Use if you don’t have access to your domain’s DNS settings.
- Quick setup, ideal for testing purposes.
- Not recommended for production due to limited authentication features.
- It cannot be used with Email API
- Domain Authentication:
- Use if you have access to your domain’s DNS settings.
- Provides better security with SPF and DKIM authentication.
- Recommended for production environments for improved deliverability.
2. Follow the Set-Up Guide:
- For Single Sender Verification: Follow the instructions here: Single Sender Verification Guide
- For Domain Authentication: Follow the instructions here: Domain Authentication Guide
3. Verify Your Sender Identity:
- Complete the verification process by following the steps outlined in the chosen guide.
- Ensure that your sender email address or domain is properly verified according to the selected method.
Additional Information
Due to the enforcement of DMARC policies by major email providers like Google, Yahoo and Microsoft, we do not recommend using free email addresses from those providers as Single Senders. Although you can verify them, emails sent from these addresses are likely to be classified as Spam or rejected. For more information, you can refer to this blog article.