How SPF, DKIM and DMARC Work

On This Page

Email & Deliverability Markdown

SPF, DKIM and DMARC are complementary email authentication mechanisms.

SPF

SPF lists systems authorized to send for a domain. Maintain one valid SPF policy and include every legitimate sender.

DKIM adds a digital signature that recipients verify through a public DNS key.

DMARC evaluates alignment and tells recipients how to handle failures. Start with reporting, review legitimate sources and tighten policy gradually.

Self-managed mail servers should use a consistent hostname, forward DNS and PTR record.

Was this helpful?

Thanks for your feedback!