Set up SPF, DKIM and DMARC

These records prove your email really comes from your domain. Add them in your domain's DNS zone.

SPF

A TXT record on your root domain listing who may send for you:

v=spf1 include:YOUR_MAIL_PROVIDER ~all

Use the exact include: value from your mail service details. Only one SPF record may exist per domain — merge, don't duplicate.

DKIM

Your mail service gives you a selector and a long public key. Add a TXT record named selector._domainkey with that key as the value. Outgoing mail is then signed.

DMARC

A TXT record named _dmarc:

v=DMARC1; p=none; rua=mailto:[email protected]

Start with p=none to receive reports without affecting delivery, check they look right for a couple of weeks, then move to p=quarantine and eventually p=reject.

MX

Make sure your MX records point at the mail server you actually use.

Verify

Send a test email to a Gmail address, open the message → Show original and look for SPF: PASS, DKIM: PASS and DMARC: PASS.

Background: DNS records explained.