Practical guide
SPF, DKIM and DMARC explained
Are your emails ending up in junk, or is someone sending messages in your name? Three DNS records solve most of these problems.
SPF: who is allowed to send
The SPF record (of the TXT type) lists the servers authorised to send emails for your domain. A receiving server can then spot a message sent from an unauthorised server. There must be only one SPF record per domain.
DKIM: a tamper-proof signature
DKIM adds a cryptographic signature to every email sent. The public key is published in your DNS; the recipient checks that the message genuinely comes from your domain and has not been altered along the way.
DMARC: the instruction when checks fail
DMARC tells receiving servers what to do with a message that fails the SPF and DKIM checks: let it through, quarantine it or reject it. It also lets you receive reports. You often start with a monitoring policy, then tighten it.
In practice
These three settings improve deliverability and protect your reputation. The major email providers increasingly require them from senders. Ouibel mailboxes come with SPF, DKIM and DMARC already configured.
Frequently asked questions
In brief
Is it mandatory?
Not legally, but without them your emails are far more likely to be filtered, and your domain can be spoofed.
How can I check my configuration?
Free online tools can analyse your records; we can also carry out the check for you.
Going further
Also worth reading
A question about your project?
We'll answer it, free of charge.
Tell us about your situation: we will get back to you within 24 working hours.