How to setup DKIM, DMARC, SPF & MX?
Guide to setting up the DNS records required for each domain: MX, SPF, DKIM, and DMARC.
Last updated
Guide to setting up the DNS records required for each domain: MX, SPF, DKIM, and DMARC.
Last updated
DKIM record: DKIM adds a signature to emails to make them easier to track and avoid spoofing.
DMARC record: DMARC authenticates emails and notifies the world that they were sent from a legitimate source.
SPF record: The SPF record specifies which domains are authorised to send emails.
MX records: MX records send emails to you; without them, no emails will arrive.
In general, or if you're using another domain name provider, you can set it up with the resources listed below.
Setting up the MX record is critical - you should refer to your email provider's official guide for the latest information.
Google workspace:
Office 365:
Google/GSuite SPF guide:
Office 365 SPF guide:
You can check if your SPF is set up properly using
Again, assuming you are using Google Workspace you can follow to set up DKIM.
Google/GSuite DKIM guide:
Office 365 DKIM guide:PS: Make sure to use your service provider recommended DKIM Selector: Google/Gsuite - "google" Office 365 - "microsoft" Other service providers - "default"
Important: Configure DKIM and SPF before configuring DMARC. DKIM and SPF should be authenticating messages for at least 48 hours before turning on DMARC.
You can check if your DKIM is set up properly using
Assuming you are using Google Workspace you can follow to set up DMARC.
You may also choose to use a third-party DMARC provider like that from Postmark [].
You can check if your DMARC is set up properly using