Working with DNS records
SPF, DKIM, and DMARC in Moosend
Email sender authentication helps your email marketing campaigns be delivered to your recipients' inboxes instead of their spam folders. Email sender authentication involves the following components that help protect email message senders and recipients from spam, spoofing, and phishing:
Sender Policy Framework (SPF)
An email validation system designed to prevent spam email messages by verifying the sender's IP address. SPF allows administrators to specify which hosts are allowed to send email messages from a given domain, by creating a list of authorized hosts in the Domain Name System (DNS) records. Servers use the DNS to check that an email message from a given domain is sent by a host who has permission to do this. Many email clients (Gmail, Verizon, and others) use SPF to validate that the IP address the email was sent from is trustworthy.
DomainKeys Identified Mail (DKIM)
Gives an organization the opportunity to take responsibility for a message while it is in transit. The message is signed with the organization's certificate and a signature is added to the email headers. Many email clients (Yahoo, Gmail, Outlook, and others) check for a valid DKIM signature on incoming email messages.
Domain-based Message Authentication, Reporting, and Conformance (DMARC)
An email authentication, policy, and reporting protocol designed to enhance the security of your email communication. It ensures the destination email systems trust messages sent from your domain and helps the receiving system decide how to handle messages from your domain that fail SPF or DKIM checks.
Moosend validates your sender accounts and notifies you if your DNS record is unverified. To verify your sender account, you must create a DMARC value in your DNS management interface.
Tip
To create a DMARC value, follow the steps in How To Avoid Hurting Your Emails & Domain Reputation In 2024.
To set up SPF and/or DKIM, follow the steps in Set up and verify DNS records.