DKIM / SPF / DMARC
What are DKIM, SPF, and DMARC?
These three terms represent important security measures that protect your emails from spam and misuse. They help ensure that emails sent from your domain are truly from you and not spoofed by fraudsters. Here's a simple explanation for each of these protocols:
SPF (Sender Policy Framework)
SPF is a method used to verify which servers are authorized to send emails on behalf of your domain. It helps identify and block fake senders. You define in an SPF record which servers are allowed to send emails for your domain.
Why is SPF important?
With SPF, you prevent fraudsters from sending emails that appear as if they come from your domain. If someone tries to send an email from an unauthorized server using your domain, the receiving email server can block or mark the message as spam.
DKIM
DKIM adds a digital signature to your outgoing emails. This signature is checked by the receiving email server to ensure the email genuinely came from your domain and wasn’t tampered with along the way.
Why is DMARC important?
DMARC protects your domain from abuse by specifying how email servers should handle emails that fail the SPF or DKIM check. You can decide if these emails should be sent to the spam folder, rejected, or delivered anyway. It also provides reports on whether emails were correctly authenticated and who else might be trying to send emails on your behalf.
DMARC (Domain-based Message Authentication, Reporting & Conformance)
DMARC builds on SPF and DKIM. It gives receiving email servers specific instructions on what to do if an email fails the SPF or DKIM checks. DMARC also provides you with reports about who is sending emails on your behalf and whether they passed the verification.
Why is DMARC important?
DMARC protects your domain from abuse by specifying how email servers should handle emails that fail the SPF or DKIM check. You can decide if these emails should be sent to the spam folder, rejected, or delivered anyway. It also provides reports on whether emails were correctly authenticated and who else might be trying to send emails on your behalf.
Where can I find SPF, DKIM, and DMARC records?
You can find the settings for SPF, DKIM, and DMARC in the DNS settings of your domain. There, you can add or modify the corresponding DNS records. If you're unsure how to do this, we provide a guide on our website that walks you through setting up SPF, DKIM, and DMARC step by step.
-
Note for Hoststar customers: At Hoststar, SPF and DKIM records are automatically created as soon as you add a new email address for your domain. You don’t have to worry about manually setting up these records—they are already in place to protect your emails.
Summary of the benefits of SPF, DKIM, and DMARC:
-
SPF: Specifies which servers can send emails for your domain, preventing fake senders.
-
DKIM: Adds a digital signature to your emails to ensure they aren’t altered in transit.
-
DMARC: Specifies what to do if an email fails the SPF or DKIM check and sends you reports about potential issues.
With these security protocols, you protect your domain and ensure your emails aren't used for fraudulent purposes.