Knowledge Base
How to Set Up Email Authentication (SPF, DKIM, DMARC)
Email authentication is crucial for ensuring your emails reach your customers' inboxes. This guide will walk you through setting up SPF, DKIM, and DMARC records for optimal deliverability.
Why Email Authentication Matters
Email authentication helps ISPs verify that your emails are legitimately from you and not from spammers pretending to be your domain. Without proper authentication, your emails are more likely to end up in spam folders or be rejected entirely.
Step 1: Set Up SPF (Sender Policy Framework)
SPF specifies which mail servers are authorized to send email on behalf of your domain.
Adding the SPF Record
- Log in to your DNS provider's control panel
- Navigate to DNS records management
- Create a new TXT record with the following value:
v=spf1 include:spf.bzengage.com ~all
If you have an existing SPF record, add include:spf.bzengage.com before the ~all or -all mechanism.
Step 2: Set Up DKIM (DomainKeys Identified Mail)
DKIM adds a digital signature to your emails that proves they haven't been altered in transit.
Getting Your DKIM Key
- Go to Settings > Email Configuration in your dashboard
- Click on Domain Authentication
- Enter your sending domain and click Generate DKIM Key
- Copy the provided DKIM record
Adding the DKIM Record
Create a TXT record in your DNS with:
- Host:
bzengage._domainkey - Value: The DKIM key from your dashboard
Step 3: Set Up DMARC (Domain-based Message Authentication)
DMARC ties SPF and DKIM together and tells receiving servers what to do with emails that fail authentication.
Adding the DMARC Record
Create a TXT record with:
- Host:
_dmarc - Value:
v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com
p=none to monitor without affecting delivery, then gradually move to p=quarantine and finally p=reject once you're confident in your configuration.
Verifying Your Configuration
After adding all records, return to your dashboard:
- Go to Settings > Email Configuration
- Click Verify Domain
- Wait for the verification to complete (may take up to 48 hours for DNS propagation)
Troubleshooting
If verification fails, check the following:
- DNS records may take 24-48 hours to propagate
- Ensure there are no typos in the record values
- Check that you don't have conflicting SPF records
- Verify the DKIM selector matches exactly
Related Articles
Table of Contents
Related Articles
8 min read
5 min read
6 min read
12 min read