What are SPF, DKIM and DMARC?

FAQ

If you want to make sure that your e-mails do not land in the spam folder, think of it as trying to get into a very exclusive party. Except that this time, instead of relying only on your charm and an invitation, you have to prove that you have a special pass – in this case a technical set-up that confirms your identity and your authorisation. Here are the key technical aspects that serve as your VIP passes to the world of e-mail communication:

SPF (Sender Policy Framework)
This is like having confirmation on the guest list that your limousine (your e-mail address) is allowed to park in front of the club. SPF verifies that the IP address from which e-mails are sent is authorised by the owner of the domain. This helps to prevent forgers from using your e-mail address to send unsolicited mail.

DKIM (DomainKeys Identified Mail)
Think of this as the seal you press onto your invitation with a special signet ring. DKIM adds a digital signature to your e-mails that confirms the content of the e-mail was not altered during transmission. This strengthens trust in your messages and helps to protect against forgery.

DMARC (Domain-based Message Authentication, Reporting, and Conformance)
This is like the party security checking your identity while also recording who came in. DMARC uses SPF and DKIM to verify that an e-mail really does come from a legitimate source, and instructs recipients on what to do with e-mails that are not authentic.

Think of SPF, DKIM and DMARC as your three most important VIP passes, the ones you need in order to enter the inbox without any problems. Without them your chances of getting onto the VIP list drop dramatically and you may end up in a dark alley full of spam.

When you have these technical aspects set up correctly, it not only increases the chances that your e-mails will be delivered, it also improves your overall sender reputation. It is like being on the VIP list: not only do they let you in, everyone also takes you more seriously.

How and where do I set this up?

Setting up SPF, DKIM and DMARC requires a little technical knowledge and access to your DNS (Domain Name System) manager, which is usually the panel provided by your web hosting company or domain registrar. Think of it as setting up a security system for your house. First you have to find out where the control panels are and how to set them up correctly to make sure that your house (in this case your e-mail communication) is protected. Here is a basic overview of how to go about it:

Setting up SPF:

  1. Log in to your DNS manager: This may be at your web hosting company or wherever you registered your domain.
  2. Create a new TXT record: In the DNS record management section, find the option to add a TXT record.
  3. Enter the value of the SPF record: The value should look something like this: v=spf1 include:_spf.yourdomain.com ~all, where _spf.yourdomain.com is the address of the e-mail service you use for sending e-mails. This setting allows e-mails from your e-mail service to be considered legitimate.

Setting up DKIM:

  1. Request a DKIM key from your e-mail provider: Many e-mail marketing platforms, such as Mailchimp or SendGrid, will let you generate DKIM keys directly in their settings.
  2. Add the DKIM record to your DNS: Just as with SPF, you add a new TXT record to your DNS. The value of the record will be a longer string provided by your e-mail provider.
  3. Activate DKIM in your e-mail service: After adding the record to DNS, make sure that DKIM is activated on the side of your e-mail service.

Setting up DMARC:

  1. Create a DMARC policy: A DMARC policy is formulated as a TXT record that defines how e-mails failing SPF and DKIM should be handled. For example: v=DMARC1; p=none; rua=mailto:[email protected], where p=none specifies that nothing will be done with non-compliant e-mails for the time being, but reports about them will be sent to the e-mail address given.
  2. Add the DMARC record to your DNS: As with the previous steps, create a new TXT record and enter your DMARC policy as the value.

Remember that after setting up SPF, DKIM and DMARC it can take up to 48 hours for the changes to take effect. It is a good idea to check regularly whether your settings are correctly detected, using the various online tools for verifying SPF, DKIM and DMARC. It is like checking whether your home security system is communicating correctly with the monitoring centre. These steps will increase the chances that your e-mails arrive where they should and will protect your reputation as a sender.

If you are not sure how to proceed, feel free to contact us and we will help you.

More questions and answers