Setting up SPF, DKIM, and DMARC ensures your emails are authenticated. This helps prevent phishing, email spoofing, and improves deliverability. Without these, your emails could end up in spam or get rejected by email servers.<\/p>\n\n\n\n
SPF (Sender Policy Framework) verifies that an email sender is authorized to send messages from your domain. This is managed by your domain provider.<\/p>\n\n\n\n
v=spf1 include:<your_email_service_provider> -all<\/code><\/li>\n<\/ul>\n\n\n\n4<\/span>Save the record and wait for it to update (this can take up to 72 hours).<\/div><\/div>\n\n\n\nCommon Errors:<\/strong><\/p>\n\n\n\n\n- Multiple SPF records:<\/strong> You should only have one SPF record.\n
\n- Fix:<\/strong> Merge multiple SPF records into one by adding several \u201cinclude:\u201d clauses. If you\u2019re unsure, ask your domain provider for the correct SPF value.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n
\n- SPF Fail: <\/strong>This happens when unauthorized servers try to send emails from your domain.\n
\n- Fix:<\/strong> Make sure all email services you use are added to the SPF record.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n
How to set up DKIM?<\/h2>\n\n\n\n
DKIM (DomainKeys Identified Mail) adds a digital signature to your emails to ensure they haven\u2019t been changed during transmission. Your email provider manages this.<\/p>\n\n\n\n
1<\/span>In your email provider\u2019s dashboard, generate DKIM keys.<\/div><\/div>\n\n\n\n2<\/span>Go to your DNS provider\u2019s dashboard.<\/div><\/div>\n\n\n\n3<\/span>Add a TXT record with the public key your email provider gave you:<\/div><\/div>\n\n\n\n\nv=DKIM1; k=rsa; p=<public_key><\/code><\/li>\n<\/ul>\n\n\n\n4<\/span>Save the record and wait for it to update.<\/div><\/div>\n\n\n\n5<\/span>Enable DKIM in your email provider\u2019s settings (sometimes this is automatic).<\/div><\/div>\n\n\n\nCommon Errors:<\/strong><\/p>\n\n\n\n\n- Key too small:<\/strong> Some DNS providers limit key sizes, which can cause problems.\n
\n- Fix: <\/strong>Use a provider that supports larger records or shorten the key. If needed, contact your email provider for the correct DKIM value.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n
\n- DKIM mismatch:<\/strong> The DKIM signature doesn\u2019t match the public key.\n
\n- Fix: Double-check the key in DNS and your email provider settings.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n
How to set up DMARC?<\/h2>\n\n\n\n
DMARC (Domain-based Message Authentication, Reporting & Conformance) ties together SPF and DKIM. It helps email servers decide what to do with emails that fail SPF or DKIM checks.<\/p>\n\n\n\n
1<\/span>Go to your DNS provider’s dashboard.<\/div><\/div>\n\n\n\n2<\/span>Add a new TXT record like this:<\/div><\/div>\n\n\n\n\nv=DMARC1; p=none; rua=mailto:<your_email_for_reports>;<\/code><\/li>\n<\/ul>\n\n\n\n3<\/span>Choose your policy:<\/div><\/div>\n\n\n\n\n- none:<\/strong> No action is taken. Use this for monitoring to see how many emails fail authentication.<\/li>\n\n\n\n
- quarantine:<\/strong> Emails that fail go to the spam folder.<\/li>\n\n\n\n
- reject:<\/strong> Emails that fail are blocked completely. Only use this when you\u2019re confident your authentication works perfectly.<\/li>\n<\/ul>\n\n\n\n4<\/span>Save the record and wait for it to update (up to 72 hours).<\/div><\/div>\n\n\n\n
Common Errors:<\/strong><\/p>\n\n\n\n\n- Too strict policies (reject\/quarantine):<\/strong> Applying strict policies too soon can block legitimate emails.\n
\n- Fix:<\/strong> Start with \u201cnone,\u201d then move to \u201cquarantine\u201d or \u201creject\u201d once you\u2019re confident.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
Setting up SPF, DKIM, and DMARC ensures your emails are authenticated. This helps prevent phishing, email spoofing, and improves deliverability. Without these, your emails could end up in spam or get rejected by email servers. How to set up SPF? SPF (Sender Policy Framework) verifies that an email sender is authorized to send messages from […]<\/p>\n","protected":false},"author":13,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[45],"tags":[],"class_list":["post-870","post","type-post","status-publish","format-standard","hentry","category-technical-set-up-dns-records"],"acf":[],"_links":{"self":[{"href":"https:\/\/academy.lemlist.com\/academy\/wp-json\/wp\/v2\/posts\/870","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/academy.lemlist.com\/academy\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/academy.lemlist.com\/academy\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/academy.lemlist.com\/academy\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/academy.lemlist.com\/academy\/wp-json\/wp\/v2\/comments?post=870"}],"version-history":[{"count":1,"href":"https:\/\/academy.lemlist.com\/academy\/wp-json\/wp\/v2\/posts\/870\/revisions"}],"predecessor-version":[{"id":871,"href":"https:\/\/academy.lemlist.com\/academy\/wp-json\/wp\/v2\/posts\/870\/revisions\/871"}],"wp:attachment":[{"href":"https:\/\/academy.lemlist.com\/academy\/wp-json\/wp\/v2\/media?parent=870"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/academy.lemlist.com\/academy\/wp-json\/wp\/v2\/categories?post=870"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/academy.lemlist.com\/academy\/wp-json\/wp\/v2\/tags?post=870"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}