Question 1

What is SPF and why do I need it?

Accepted Answer

SPF (Sender Policy Framework) is a DNS record that specifies which mail servers are allowed to send email on behalf of your domain. Without SPF, spammers can forge emails from your domain, and your legitimate emails may be flagged as spam.

Question 2

What is DKIM and why do I need it?

Accepted Answer

DKIM (DomainKeys Identified Mail) adds a cryptographic signature to your emails that proves they weren't modified in transit. It helps receiving servers verify that emails actually came from your domain and haven't been tampered with.

Question 3

What is DMARC and what policy should I use?

Accepted Answer

DMARC (Domain-based Message Authentication) tells receiving servers what to do when SPF or DKIM checks fail. Start with 'none' to monitor without affecting delivery, then move to 'quarantine' (send to spam) or 'reject' (block entirely) once you've verified legitimate emails pass.

Question 4

How do I add these records to my DNS?

Accepted Answer

Log into your domain registrar or DNS provider (like Cloudflare, Namecheap, or GoDaddy). Find the DNS settings and add the TXT records exactly as shown. SPF and DMARC are TXT records. DKIM is usually a TXT or CNAME record depending on your email provider.

Question 5

Can I have multiple SPF records?

Accepted Answer

No, you can only have one SPF record per domain. If you use multiple email providers, combine all their 'include' statements into a single SPF record. This tool does that automatically when you select multiple providers.

Email Authentication Generator

Select Your Email Providers

Transactional EmailAPIs for automated emails

Workspace & BusinessEmail for your team

Email MarketingNewsletters & campaigns

Other ProvidersAdd custom SPF includes

Frequently Asked Questions

Send emails that actually arrive