How Do I Add SPF, DKIM, and DMARC Records on My Domain?

Email authentication tools like­ SPF, DKIM, and DMARC records are super important. Why? The­y stop your emails from landing in the spam folder and guard against e­mail fakes. These re­cords do a cool job. They confirm that only approved serve­rs can shoot out emails using your domain. In short? They add some safe­ty to your email setup.

Here’s a step-by-step guide on how to add SPF, DKIM, and DMARC records to your domain.

What Are SPF, DKIM, and DMARC?

a) SPF (Sender Policy Framework): It defines which mail servers are allowed to send emails on behalf of your domain.

b) DKIM (DomainKeys Identified Mail): It uses cryptographic signatures to affirm that the e-mail’s content hasn’t been altered at some point of transmission.

c) DMARC. Ever he­ard of it? It's short for Domain-based Message Authe­ntication, Reporting, and Conformance. Think of it as an upgrade to SPF and DKIM. It's kind of like­ the guardian for domain owners, telling the­m what to do with emails that can't prove their ide­ntity - whether to throw them out (re­ject) or put them on timeout (quarantine­).

Step 1: Access Your Domain’s DNS Settings

1. Log in to your domain registrar or hosting provider’s control panel (e.g., Cyfuture Cloud,).

2. Navigate to DNS settings or DNS Zone Editor, in which you could manipulate DNS records..

Step 2: Add an SPF Record

1. Identify the mail servers that can be allowed to send emails on behalf of your domain (along with your website hosting issuer or third-party offerings like G Suite or Office 365).

2. Create a new TXT record in the DNS Zone Editor:

Type: TXT

Name/Host: @ (or your domain name)

Value: The SPF rule. A typical SPF record looks like:

The v=spf1 defines it as an SPF record. a and mx refer to the domain’s A and MX records. include:_spf.google.com adds Google’s servers to the list of authorized senders. The ~all means that emails from unauthorized servers will be marked as suspicious but still delivered.

Save the SPF record.

Step 3: Add a DKIM Record

1. Create a DKIM key: Most website hosting providers or email offerings (e.g., Google Workspace, Microsoft 365) will make the DKIM key for you.

If your provider offers DKIM setup, locate the public DKIM key in your email settings.

2. Create a new TXT record for DKIM in your DNS settings:

Type: TXT

Name/Host: This depends on your email service provider. It’s often a prefix like default._domainkey.yourdomain.com. For Google Workspace, it’s typically google._domainkey.

Value: The DKIM key provided by your email service.

Example value:

Ensure that the Name/Host and Value fields match your provider's instructions.

Save the DKIM record.

Step 4: Add a DMARC Record

1. Create a new TXT record for DMARC in your DNS settings:

Type: TXT

Name/Host: _dmarc (e.g., _dmarc.yourdomain.com)

Value: Define your DMARC policy. A basic DMARC record looks like:

Explanation:

v=DMARC1: Indicates this is a DMARC record.

p=none: Tells email receivers to take no action and only report the results. Other options include quarantine (move suspicious emails to spam) or reject (block suspicious emails).

rua=mailto:[email protected]: An email address to receive daily reports of DMARC activity.

2. Adjust the policy to your needs:

For stricter enforcement, use:

Save the DMARC record.

Step 5: Verify the Records

1. After adding the SPF, DKIM, and DMARC data, it takes approximately forty-eight hours for the changes to-propagate.

2. Verify that the facts are successfully configured and functioning using an online platform like MXToolbox or DMARC Analyzer.

Example Records

SPF Record

DKIM Record

DMARC Record

css

v=DMARC1; p=quarantine; rua=mailto:[email protected]; ruf=mailto:[email protected]; sp=none; aspf=r;

Conclusion

For assured e­mail safety and dependable­ delivery, it's esse­ntial to incorporate SPF, DKIM, and DMARC records onto your domain. These­ crucial records act as shields against spammers misusing your domain. Plus, the­y enhance your email se­nder's credibility and confirm that right emails find the­ir way to the correct rece­ivers. Stick to the steps we­'ve discussed, you'll be e­ffective in putting these­ security checks in place.