Skip to main content
Email

SPF, DKIM and DMARC: keep your email out of spam

Last updated Nov 2, 20261 min read

On this page

Three DNS records prove to other mail servers that email from your domain really comes from you. Without them, your messages are more likely to land in spam, and scammers can more easily pretend to be you.

RecordWhat it does, in plain language
SPFA list of the servers allowed to send email for your domain
DKIMA digital signature on each email that proves it wasn't changed on the way
DMARCTells other servers what to do with email that fails SPF or DKIM, and sends you reports

If your nameservers point to Nexcified

We set up SPF and DKIM for you automatically. There's nothing to do.

If your DNS is somewhere else

Copy the SPF, DKIM and DMARC records from Hosting › Domains › DNS records in Nexcified Client and add them at your DNS provider.

Using other services that send email

Newsletter tools, online shops and invoicing apps also send email "from" your domain. Each one has to be added to your SPF record, and most give you their own DKIM record too. Ask us before adding them: a domain can only have one SPF record, so they must be combined.

Tip: A good starting DMARC record is v=DMARC1; p=none; rua=mailto:you@yourdomain.com. Once reports show everything passing, change p=none to p=quarantine.

We value your privacy

We use necessary cookies to make this site work. With your permission, we’d also like to remember your region, understand how the site is used and measure our ads. Cookie policy