Skip to main content

SPF, DKIM, and DMARC

SPF, DKIM, and DMARC are the identity layer for production email.

RecordPurpose
SPFAuthorizes Mailtarget to send mail for your domain.
DKIMSigns each message so receiving servers can verify that the message was not modified.
DMARCTells receivers how to treat mail that fails alignment checks.

Mailtarget provides the exact records to publish when you add a sending domain. Copy them exactly, publish them at your DNS provider, then verify the domain in Mailtarget.

Common failures

  • Publishing two SPF TXT records instead of merging into one.
  • Proxied CNAME records at Cloudflare.
  • DKIM labels changed by the DNS provider.
  • DMARC policy set to reject before all legitimate senders are aligned.