These three DNS mechanisms help receiving servers evaluate messages that claim to come from your domain.
Start with the checks below. Each step explains what to look for and what to try next.
What each record does
SPF lists permitted sending sources, DKIM signs outgoing mail, and DMARC instructs receivers what to do when alignment checks fail and can provide reports.
Set up safely
- List every service sending mail as your domain, including newsletters and transactional apps.
- Use your mail provider’s exact SPF and DKIM instructions.
- Publish one consolidated SPF TXT record rather than multiple SPF records.
- Start with a monitoring-oriented DMARC policy if your provider recommends it, then review reports before tightening enforcement.
Troubleshoot delivery
Read full message headers and authentication results. SPF passing alone does not guarantee inbox placement, and a strict DMARC policy can reject legitimate mail if services are not aligned.
Keep records current
Review authentication records whenever you add or change an email sender. Remove old authorized senders carefully after confirming they are unused.
Guidance may vary by plan, control panel version and enabled features. Review the settings available to your account before changing live services.