Email Deliverability Check

What is SPF?

SPF (Sender Policy Framework) helps prevent email spoofing by specifying which servers are allowed to send email from your domain.

Basic SPF Record Example:

v=spf1 include:_spf.google.com include:_spf.mailgun.org ~all

Steps to Fix:

1. Access your domain's DNS settings
2. Create a TXT record
3. Set the host to @ or your domain name
4. Add your email providers (Google, Office 365, etc.)
5. End with ~all (soft fail) or -all (hard fail)

Common Includes:

• Google Workspace: include:_spf.google.com
• Office 365: include:spf.protection.outlook.com
• Mailgun: include:_spf.mailgun.org

What is DKIM?

DKIM (DomainKeys Identified Mail) adds a digital signature to your emails to verify they haven't been tampered with.

Steps to Fix:

1. Generate DKIM keys from your email provider
2. Create a TXT record in your DNS
3. Use the selector provided (often 'default' or 'google')
4. Add the public key as the value

Common Providers:

• Google Workspace: Check Admin Console > Apps > Google Workspace > Gmail > Authenticate email
• Office 365: Exchange Admin Center > Protection > DKIM
• Mailgun: Find in Domain Settings

What is DMARC?

DMARC tells receiving servers what to do with emails that fail SPF and DKIM checks.

Basic DMARC Record Example:

v=DMARC1; p=reject; rua=mailto:dmarc@yourdomain.com; pct=100

Policy Options:

• p=none: Monitor only (least secure)
• p=quarantine: Send to spam folder
• p=reject: Block failed messages (most secure)

Implementation Steps:

1. Start with monitoring (p=none)
2. Add reporting email (rua=)
3. Monitor reports for legitimate failures
4. Gradually increase policy:
   • none → quarantine → reject
   • Use pct to apply gradually (pct=10 → pct=50 → pct=100)