SPF, DKIM, DMARC & MX set up

SPF, DKIM, DMARC & MX set up

SPF, DKIM, DMARC and MX records set up in DNS
SPF, DKIM, DMARC and MX records set up in DNS
SPF, DKIM, DMARC and MX records set up in DNS

SPF, DKIM, DMARC and MX records are essential for email delivery, without those DNS records you’ll probably land in spam folder. What each of them do?

MX specifies mail servers for receiving incoming emails.

SPF prevents email forgery and spam by verifying authorized senders.

DKIM adds a digital signature to emails to verify authenticity and prevent tampering.

DMARC enhances email security by combining SPF and DKIM, and provides instructions for handling suspicious emails.

Follow the guide below on how to add those records:

MX

Google workspace

This record should already exist when you create Google workspace.

If for some reason you’re missing those records, here is offical guide from Google: Guide

Microsoft 365

This record should already exist when you create Microsoft365.

If for some reason you’re missing those records, here is offical guide from Microsoft: Guide

SPF

Google workspace

Official guide from Google: Guide

Microsoft 365

This record should already exist when you install Microsoft365.

Official guide from Microsoft: Guide

DKIM

Google workspace

Official guide from Google: Guide

Microsoft 365

Official guide from Microsoft: Guide

DMARC

  1. Open website by clicking this link. If you can’t access it try using the VPN

  2. Apply settings from the screenshot below and click “Generate”. ⚠️ IMPORTANT: Make sure to use your domain and email instead of yourbusiness.com and name@yourbusiness.com

    Dmarc record generator
  3. Copy the generated records and open your DNS records inside your domain provider (godadddy, namecheap, porkbun etc.) and add new record with following settings:

    Type: TXT
    Host: _dmarc
    TXT value/Answer: {{Record that you’ve copied from Easydmarc}}
    TTL: Leave it by default

Check if everything is set up correctly

You can use mail-tester.com to check if everything is setted up correctly. All you need to do is to send email to address they’ve generated for you and you will see a report with all the potential issues.

SPF, DKIM, DMARC and MX records are properly set up