← Knowledge Base Guide

SPF, DKIM & DMARC explained

Email authentication records help prove that your emails are allowed to be sent from your domain.

Why these records matter

Without correct email authentication, your messages may land in spam or fail delivery. SPF, DKIM and DMARC work together to help receiving mail servers trust your domain.

What each record does

  • SPF: Lists which servers are allowed to send email for your domain.
  • DKIM: Adds a digital signature to emails so they can be verified.
  • DMARC: Tells mail servers what to do if SPF or DKIM checks fail.
Tip: A domain should normally have only one SPF record. Multiple SPF records can cause email authentication failure.

Common setup order

  1. Add MX records for your email provider.
  2. Add SPF TXT record.
  3. Add DKIM records from your email provider.
  4. Add DMARC record, usually starting with monitoring mode.
← All guides Need help? Contact support →