Skip to content
Lifecycle & CRM

Email authentication (SPF, DKIM, DMARC)

Also known as: SPF · DKIM · DMARC · email sender authentication

Definition

Email authentication is the set of DNS records, SPF, DKIM and DMARC, that let a receiving mail server check that an email really came from the domain it claims and wasn't altered. Without them, mailbox providers can reject or junk legitimate campaigns.

SPF lists the servers allowed to send for a domain. DKIM adds a cryptographic signature that the receiver checks against a public key published in DNS. DMARC tells receivers what to do when those checks don't line up with the visible From address, and where to send reports. A common failure is a new sending tool, such as a newsletter platform, a CRM or a web form, added without its own records.

Since 1 February 2024, Google has required anyone sending more than 5,000 messages a day to Gmail addresses to use SPF, DKIM and DMARC, keep spam rates below 0.30 per cent and offer one-click unsubscribe on marketing mail, and it recommends staying below 0.10 per cent. Yahoo's rules, enforced from February 2024, require spam rates below 0.3 per cent, SPF and DKIM, a published DMARC policy and unsubscribes honoured within two days. Start DMARC in monitoring mode, read the reports until every legitimate sender passes, then tighten the policy. Send from your own domain, not a free webmail address.

Put it to work

Definitions are free.So is the cost review.

A short call, then a written review inside 72 hours: what your marketing costs, what it produces, and what is worth fixing first.

hello@magnetickeys.comWhatsApp +971 52 529 5577Al Khawaneej, Dubai · United Arab Emirates