WPCheck a site
Menu

Set up SPF and DMARC

SPF and DMARC tell receiving mail servers who may send email for your domain. Without them, your address is easier to fake.

Steps

About an hour

All guides

  1. p=none
  2. p=quarantine
  3. p=reject
  1. List every service that sends mail for you: your mailbox, your newsletter tool, your invoicing software.
  2. Add one SPF record, a TXT record at the root of the domain, that names those services and ends in ~all. A domain must have only one SPF record.
  3. Add a DMARC record at _dmarc with p=none and an address for reports. This changes nothing yet: it only shows you who is sending.
  4. When your real mail passes for a few weeks, move to p=quarantine, then p=reject.
Example
example.com.        TXT  "v=spf1 include:_spf.mail-provider.example ~all"
_dmarc.example.com. TXT  "v=DMARC1; p=none; rua=mailto:dmarc@example.com"
Read the guideLink your languages with hreflang