Overview

If your email is being rejected, landing in spam, or failing deliverability checks, the problem often comes down to missing or incorrect mail authentication records. The three most important ones are SPF, DKIM, and DMARC.

What These Records Do

• SPF helps define which servers are allowed to send mail for your domain
• DKIM adds a digital signature to help prove your message is legitimate
• DMARC tells receiving servers how to handle messages that fail checks

Where These Records Are Added

They are added as DNS records. If your DNS is managed in Cloudflare, add them there. If your domain uses your hosting nameservers, add them in the hosting DNS zone.

Common Problems

• No SPF record exists
• A DKIM record was not generated or published correctly
• DMARC is missing or too strict before testing is complete
• Email is being sent by a service not included in SPF

If you need hands on help with business email setup, open a support ticket. You can also read more practical hosting tips in our resources section.