Setting up SPF, DKIM and DMARC records

SPF, DKIM and DMARC records

These three DNS records protect your email from spoofing and improve message delivery. They tell the receiving server that the message was sent from an authorized server.

SPF (Sender Policy Framework)

An SPF record defines which servers are allowed to send email on behalf of your domain.

Nordweb's SPF record

v=spf1 include:_spf.nordweb.fi ~all

Adding it

1. Log in at panel.nordweb.fi
2. Select Websites → your site → Domains → select domain → DNS records
3. Add a TXT record name @, value v=spf1 include:_spf.nordweb.fi ~all

DKIM (DomainKeys Identified Mail)

DKIM adds a digital signature to the email message that proves the message is genuine. In Nordweb's services DKIM is enabled automatically.

DMARC (Domain-based Message Authentication)

DMARC combines SPF and DKIM and tells the recipient what to do with suspicious messages.

Basic DMARC record

v=DMARC1; p=quarantine; rua=mailto:admin@company.fi

Adding it

1. Add a TXT record to your DNS settings
2. Name _dmarc
3. Value v=DMARC1; p=quarantine; rua=mailto:your@address.fi

Why are these important?

• They prevent scammers from sending messages in your name
• They improve email deliverability (messages do not end up in spam)
• They protect your customers from phishing attacks
• Google and Microsoft require these more and more strictly

If your business does not yet have its own email, take a look at business email.

WordPress does not send email, the cause and a lasting fix »