Why you need them
SPF, DKIM and DMARC prove that email sent from your domain is genuine. Without them, your messages are more likely to land in spam and others can pretend to be you.
Step 1: SPF
SPF is a TXT record on your domain. For Google Workspace it is:
v=spf1 include:_spf.google.com ~all
For Microsoft 365 it is:
v=spf1 include:spf.protection.outlook.com -all
If you send from other services too, add them to the same record. A domain must have only one SPF record.
Step 2: DKIM
Generate the DKIM key in your email provider's admin console, for example Google Admin or Microsoft 365. It gives you a record name and a value. Add it to your domain's DNS as the provider instructs, then switch DKIM signing on in the console.
Step 3: DMARC
Add a TXT record named _dmarc with this value to start in monitoring mode:
v=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.com
After a few weeks, once you have checked the reports and fixed any legitimate sender that fails, change p=none to p=quarantine and later to p=reject.
How to check
Send an email to a Gmail address, open it, choose Show original and look for SPF, DKIM and DMARC marked PASS.
Where do I add DNS records?
In the DNS settings of the company that manages your domain's nameservers. If your domain is with webzworld, open a ticket and we will add the records for you.
Need help?
If you get stuck, open a support ticket or email info@webzworld.com and our team will help.