SPF Basics: Defining Authorized Senders
Learn what SPF is, how it defines which servers may send email for your domain, how to read SPF records, and how to avoid common SPF mistakes.
Learn how SPF, DKIM, DMARC, MX records and reverse DNS affect email authentication, trust and deliverability.
21 articles
21 guides covering email authentication topics.
Learn what SPF is, how it defines which servers may send email for your domain, how to read SPF records, and how to avoid common SPF mistakes.
Learn how to create a valid SPF record, avoid duplicate SPF records, fix syntax mistakes, and stay within SPF DNS lookup limits.
Learn what SPF mechanisms and qualifiers mean, how include, ip4, ip6, a, mx, redirect and all work, and how to avoid risky SPF configurations.
Learn what SPF’s 10 DNS lookup limit means, which mechanisms count toward it, why SPF permerror happens, and how to reduce lookup count safely.
Learn what +all means in SPF, why it weakens email authentication, and how to replace it with a safer SPF policy.
Learn how to configure one SPF record for multiple sending services, avoid duplicate SPF records, and stay within SPF’s DNS lookup limit.
Learn what DKIM is, how DKIM signatures verify email, what selectors and public keys do, and how to fix common DKIM configuration problems.
Learn what a DKIM selector is, where to publish the DKIM public key, how to avoid common DNS mistakes, and how to rotate DKIM keys safely.
Learn what DMARC is, how SPF and DKIM alignment work, what p=none, quarantine and reject mean, and how to enforce DMARC safely.
Learn what DMARC alignment means, how SPF and DKIM alignment work, and why SPF or DKIM can pass while DMARC still fails.
Learn what DMARC aggregate and forensic reports are, what data they contain, and how to use them before moving to quarantine or reject.
Learn when and how to move DMARC from monitoring to enforcement, review reports, fix legitimate senders and avoid blocking real mail.
Learn what rua and ruf mean in DMARC, how to configure aggregate and forensic reporting addresses, and when to use each tag safely.
Learn how DMARC applies to subdomains, what the sp= tag does, when subdomains inherit policy, and how to avoid blocking legitimate subdomain mail.
Learn how MX records route incoming email, how MX priority works, and how to avoid common mail routing mistakes during setup or migration.
Learn how to configure Google Workspace email authentication with MX records, SPF, DKIM and DMARC, and avoid common DNS mistakes.
Learn how to configure Microsoft 365 email DNS with MX records, SPF, DKIM and DMARC, and avoid common migration and authentication mistakes.
Learn what reverse DNS is, why PTR records matter for mail servers, how forward-confirmed reverse DNS works, and how to fix common rDNS problems.
Learn how to authenticate transactional email services with SPF, DKIM, custom Return-Path and DMARC alignment.
Learn what BIMI is, how it connects brand logos to authenticated email, what DNS records are required, and why DMARC enforcement matters.
Learn what ARC is, how it helps preserve email authentication results during forwarding, and when domain owners, mail providers or gateways may need it.
No guides found
Try searching for DNS, SPF, DMARC, SSL, WHOIS, nameservers, expiry or blacklist.
Use these free tools alongside the guides to verify your configuration.
Send us your domain or email authentication issue. We’ll review SPF, DKIM, DMARC, MX and related signals and route the request if hands-on support is needed.