SPF, DKIM, and DMARC are domain-level email authentication standards. They help receiving mail systems evaluate whether messages sent from your domain are legitimate and whether they should be trusted.
- SPF tells receiving servers which systems are allowed to send mail for your domain.
- DKIM uses a cryptographic signature so receiving systems can verify that a message was authorized and was not altered in transit.
- DMARC tells receivers how to handle messages that fail SPF and DKIM alignment and can also provide reporting.
When these records are set up properly, they can improve deliverability and help protect your domain from spoofing.