SPF, DKIM & DMARC parameters
You can include the SPF, DKIM and DMARC parameters in your DNS settings. SPF (Sender Policy Framework) is a DNS text entry which provides a list of servers that should be considered allowed to send emails for a specific domain.
How does SPF work?
Sender Policy Framework or SPF follows below steps to ensure security of your email sending domains.
- Your DNS has SPF records that list all of your domain’s authorized IP addresses or servers.
- Whenever an email is sent from your domain, the receiving email server checks these records.
- If the sender’s IP address (or server) matches one on the list, the email is authenticated. Emails that pass SPF authentication can reach their destination inboxes, while those that fail might not.
How does DKIM work?
- An email sent from your domain is signed with your private key.
- To verify the signature, the receiving email server retrieves the public encryption key found in the DKIM records on your DNS. Authentication occurs if the signature and key pairs match.
- If an attacker tried to modify the email during transit, this signature would fail to verify.
- The receiving server would see this as evidence of tampering and mark the email, protecting the end receiver from a potentially malicious email.
You can see SPF, DKIM, DMARC values in the “Domains” branch of the “Settings” section.
Include these records into your provider’s DNS settings – when you’re done with the implementation, come back to the domains section and click “Set up DNS records” and “Check SPF, DKIM and DMARC record“. If records were embedded correctly, you will see green checkmarks.
Here’s a video tutorial on how to find these records:
Each hosting solution has a different interface and various methods for configuring SPF, DKIM and DMARC. Therefore, we have collected some links of the most popular hosting solution supporting articles on how it’s done. Hope it’ll come in handy.
Please find your hosting provider:
- A2 Hosting:
- Amazon Web Services:
- Aruba.it:
- BigCommerce:
- Blue host:
- Dnsmadeeasy.com:
- Dreamhost:
- GoDaddy:
- How to add an SPF record? (set the SPF host as “@”)
- How to create a CNAME for DKIM? (set the host value as “sender._domainkey”)
- Add a TXT record for DMARC.
- Google Domains:
- GreenGeeks:
- Hostgator:
- Hostinger:
- Hover:
- Inmotionhosting:
- IONOS (formally 1&1):
- iPage:
- Namecheap:
- Networksolutions:
- Nexcess:
- Shopify:
- Squarespace:
- SiteGround:
- StableHost:
- Turbify:
- Webcentral:
- WebHostingHub.com:
- WestHost:
- Wix:
- WordPress:
- WP Engine:
- Yola:
If you could not find your hosting provider on the list, please contact your provider directly for support.
That’s it!
If you got stuck on a specific task or can’t find a way to execute a particular job, contact our support team via LiveChat or [email protected] – we’re here to help 24/7.
