Error: From address does not match a verified Sender Identity (SendGrid)
SendGrid refuses mail from an address it has not verified. Verify the sender or authenticate the domain, then use that address as the From Email.
This article is for sites using the SendGrid mailer where a send fails because the From address is not a verified Sender Identity.
The error as you see it
The from address does not match a verified Sender Identity. Mail cannot be sent until this error is resolved.
Shown by the SendGrid mailer, in the failed-send banner, in Tools → Debug Events and in the Email Log. SendGrid returns it with HTTP status 403.
What this error means
SendGrid will only send mail "from" an address you have proved you control. You can prove it in two ways: verify one address (a Single Sender), or authenticate a whole domain with DNS records (Domain Authentication). Your API key works, but the From address in this email is covered by neither.
Common causes
- The From Email was never verified, or verification is still pending because the confirmation email was not opened.
- Another plugin changed the From address, for example to
wordpress@yoursite, because Force From Email is off. - The domain was authenticated for a different subdomain (for example
mail.example.com) than the one in the From address (example.com). - The verification was made in another SendGrid account or subuser.
- The domain's DNS records were removed after authenticating, so SendGrid marked the domain as failed.
How to fix
- See which address was used
Open CRM-NG SMTP → Settings → Email Log (with logging on) and check the From of the failed email, or note the From Email on CRM-NG SMTP → Settings → General.
- Open Sender Authentication
Sign in to
https://app.sendgrid.com/and go to Settings → Sender Authentication. - Authenticate the domain (recommended)
Under Domain Authentication, choose Authenticate Your Domain, follow the steps, and add the DNS records SendGrid shows at your DNS host. Return and press Verify. All addresses on the domain then count as verified.
- Or verify one address
Under Single Sender Verification, create a sender with exactly the From Email, then open the confirmation email SendGrid sends to it and confirm.
- Match the plugin
In CRM-NG SMTP → Settings → General, set From Email to an address on the authenticated domain (or the verified single sender). Tick Force From Email so other plugins cannot replace it. If you authenticated a subdomain, enter it in Sending Domain. Press Save Settings.
- Send a test
Go to CRM-NG SMTP → Tools → Email Test, fill in Send To and press Send Email.
Verify it worked
The test page shows "Test email sent successfully! Check your inbox to confirm delivery." In SendGrid, the domain shows Verified under Sender Authentication, and Activity Feed shows the test message as delivered.
Notes
- Domain authentication also signs your mail with DKIM, which improves inbox placement. After adding it, run a test and check the "Deliverability and domain authentication" section on the test page.
- Single Sender verification is fine for trying SendGrid, but a domain is better for a live site.
