How to set up email authentication for your domain (SPF, DKIM, DMARC)

Reading is great. Tracking makes it stick. Sign up for a free Dashboard to tick off tasks and see your Security Score.

Get my free Dashboard →

Cyber Nova AI helps you prepare for Cyber Essentials. It doesn't award or certify it. Follow the steps here to get ready, then apply for certification through an accredited Cyber Essentials body when you're set.

MalwareHigh priority

About 90 minutes to complete

Add SPF, DKIM, and DMARC records to your domain's DNS settings. These prevent attackers from sending emails that appear to come from your business, protecting your clients, suppliers, and reputation.

Step-by-step guide

Log in to your domain provider's DNS management panel (the same place you manage your DNS records, for example, Hostinger, GoDaddy, or Cloudflare).
Create an SPF record: add a TXT record at your root domain with the value `v=spf1 include:[your email provider] ~all`. Your email provider's documentation will give you the exact include value to use.
Create a DKIM record: your email provider (Google Workspace, Microsoft 365, or Zoho) will generate a DKIM key for you. Copy the TXT record value they provide and add it at the selector they specify (e.g. google._domainkey).
Create a DMARC record: add a TXT record at `_dmarc.yourdomain.co.uk` with the value `v=DMARC1; p=none; rua=mailto:you@yourdomain.co.uk` to begin in monitoring mode.
Verify all three records are working using MXToolbox at mxtoolbox.com. Enter your domain and check the SPF, DKIM, and DMARC results.

5 steps

Why this matters

Without SPF, DKIM, and DMARC records, anyone can send emails that appear to come from your business domain, impersonating you to your clients, suppliers, and staff. This is called email spoofing and is the foundation of many business email compromise attacks. Adding these three DNS records is a permanent, high-impact security improvement that takes an hour or two to complete.

How to confirm it worked

The setting is saved and active on your device
You have tested it works before closing the page

Tick this task off in your Dashboard to update your Security Score.

Related security tasks

Track your security score for free

Create a free Cyber Nova AI account to tick off tasks like this one, see your Security Score, and stay on top of what you've done and what's still to do.

Start your free security check