Set up SPF, DKIM and DMARC on your own domain
Three DNS records that pass, checked by an actual test email.
25 minutesRuns as Do it with meOpen the Email module
The steps
- 1
Find out who sends your mail
List every service that sends as your domain: your host, your campaign tool, your invoicing app.
- 2
Publish SPF as one record
One SPF record per domain. Every sender must be inside it, or their mail fails.
- 3
Add DKIM from each sender
Copy the key your provider gives you into DNS exactly. A truncated key silently fails.
- 4
Start DMARC in monitoring mode
Publish p=none with a reporting address first, so you can see who is sending before you enforce.
- 5
Send a real test and read the headers
Send to a mailbox you control, open the raw headers and confirm all three pass.
- 6
Tighten after two weeks of clean reports
Move to quarantine only when the reports show your legitimate senders passing.
The prompt to run
Runs as Do it with meHelp me set up SPF, DKIM and DMARC for [domain]. Ask me which services send mail for this domain, then give me the exact DNS records one at a time, tell me how to verify each one, and explain what the first DMARC report means. Never promise inbox placement.
Edit the brackets before you run it. The AI researches the live web, shows a plan with real prices, and waits for your approval before anything changes.
You are done when
- One SPF record, all senders included
- DKIM key matches exactly
- A test email shows three passes
Next lecture
Warm a new sending domain without burning it