DMARC, SPF and DKIM
DMARC, SPF and DKIM are DNS records that make it hard for others to send fake email from your domain and improve deliverability.
How they work
- SPF: lists servers allowed to send for your domain
- DKIM: signs messages digitally
- DMARC: tells receivers what to do with mail failing SPF and DKIM (monitor, quarantine, reject) and sends reports
Why it matters
Without DMARC your domain can easily be used to send fake invoices to your customers; major mailbox providers now require these records from bulk senders.
Frequently asked questions
Should we go straight to reject?
Start in monitoring mode, add every legitimate sender from the reports, then tighten.