About SPF, DKIM, and DMARC

SPF, DKIM, and DMARC are email authentication methods. Your DNS record provides information abut who you are on the internet. You can add authentication to the record to improve the security of your emails. Each authentication method works in a slightly different way:

• SPF (Sender Policy Framework) - a method that prevents your email from being used without your permission. When you authenticate via SPF, you are providing permission for a sender to use your email domain on your behalf.
• DKIM (DomainKeys Identified Mail) - adds a digital signature that confirms that your email has not been altered during transit and comes from an authorized sender.
• DMARC (Domain-based Message Authentication Reporting and Conformance) - requires that you have SPF and DKIM in place, and allows you to instruct servers how to handle messages from your organization that don’t pass SPF or DKIM.