How to setup DKIM, DMARC, SPF & MX?

Guide to setting up the DNS records required for each domain: MX, SPF, DKIM, and DMARC.

DKIM record: DKIM adds a signature to emails to make them easier to track and avoid spoofing.

DMARC record: DMARC authenticates emails and notifies the world that they were sent from a legitimate source.

SPF record: The SPF record specifies which domains are authorised to send emails.

MX records: MX records send emails to you; without them, no emails will arrive.

In general, or if you're using another domain name provider, you can set it up with the resources listed below.

Set up MX records

Setting up the MX record is critical - you should refer to your email provider's official guide for the latest information.

Set up SPF

  • Google/GSuite SPF guide: link

  • Office 365 SPF guide: link

You can check if your SPF is set up properly using this tool

Set up DKIM

Again, assuming you are using Google Workspace you can follow this guide to set up DKIM.

  • Google/GSuite DKIM guide: link

  • Office 365 DKIM guide: link PS: Make sure to use your service provider recommended DKIM Selector: ​Google/Gsuite - "google" Office 365 - "microsoft" Other service providers - "default"

You can check if your DKIM is set up properly using this tool

Set up DMARC

Important: Configure DKIM and SPF before configuring DMARC. DKIM and SPF should be authenticating messages for at least 48 hours before turning on DMARC.

Assuming you are using Google Workspace you can follow this guide to set up DMARC.

You may also choose to use a third-party DMARC provider like that from Postmark [link].

You can check if your DMARC is set up properly using this tool

Last updated