DMARC tells inbox providers what to do with email that fails SPF and DKIM for your domain. Learn the record, the policies and how to roll it out safely.
SPF lists the servers allowed to send mail for your domain. Learn the syntax, the 10-lookup limit, and ~all vs -all.
DKIM adds a cryptographic signature to your email so receivers can verify it was not altered and came from an authorized sender.
What Gmail and Yahoo require from senders: SPF, DKIM, DMARC, alignment, one-click unsubscribe and spam-rate limits, with the bulk-sender thresholds.
Outlook.com, Hotmail and Live.com now require SPF, DKIM and DMARC from domains sending more than 5,000 messages a day.
Your SPF record exceeds 10 DNS lookups and fails with PermError. Here is how to count lookups and fix it safely.
Having two v=spf1 TXT records causes a PermError. Learn how to merge them into one correct record.
Set up SPF, DKIM and DMARC for a Google Workspace domain, with the exact records and Admin console steps.
Configure SPF, DKIM and DMARC for a custom domain in Microsoft 365 / Exchange Online, including the selector1 and selector2 CNAMEs.
Authenticate your domain in Mailchimp with DKIM CNAME records so campaigns pass DMARC.
Set up SendGrid (Twilio) domain authentication so your mail is DKIM-signed with your domain and passes DMARC.
Configure Easy DKIM and a custom MAIL FROM domain in Amazon SES so your email aligns for DMARC.
Connect your email sending domain in HubSpot so marketing email is DKIM-signed with your domain.
Set up SPF, DKIM and DMARC for a domain hosted on Zoho Mail.
A practical rollout plan for DMARC enforcement without blocking your own legitimate email.
What DMARC rua aggregate reports contain, how to read them, and how to send them to a third-party address.
BIMI displays your brand logo next to authenticated email. Requirements: DMARC enforcement, an SVG logo and usually a VMC or CMC certificate.
MTA-STS forces encrypted (TLS) delivery to your mail servers; TLS-RPT sends you reports about delivery failures.
Lock down parked and non-sending domains against spoofing with three DNS records.
Why 2048-bit DKIM keys are recommended, how often to rotate keys, and how to do it without breaking mail.
How managed service providers can roll out DMARC across dozens or hundreds of client domains efficiently.