Setting up SPF, DKIM and DMARC can feel confusing at first, but they’re important to make sure your emails reach your leads’ primary inbox. Do these few things right, and you can improve your deliverability.
Important: Manyreach uses Email Service Provider to send emails for you, and emails are sent through connected inbox providers like Google Workspace or Microsoft 365. So you’ll need access to your domain’s DNS such as GoDaddy, Namecheap, Cloudflare, etc, and then copy values exactly, without any extra spaces or typos. And remember, DNS changes can take up to 24 to 48 hours to propagate.
What it is: A cryptographic signature added to every email you send. It proves the message really came from your domain and wasn’t altered in transit.
Why it matters to Manyreach users: Strong DKIM is one of the clearest trust signals mailbox providers look for.
What it is: A DNS record that lists which services are allowed to send mail for your domain.
Think of it like: A list for your domain’s senders; Only your ESPs like Google, Microsoft, etc. let in names on the list.
Why it matters to Manyreach users: If your outreach platform or CRM isn’t on the list, your mail can be flagged or filtered.
What it is: A policy that tells receivers what to do when SPF/DKIM checks fail (monitor, quarantine, or reject), and where to send you reports.
Why it matters to Manyreach users: DMARC helps protect your brand and steadily hardens your domain’s reputation over time.
SPF specifies which mail servers are allowed to send emails for your domain.
v=spf1 include:_spf.google.com ~all
v=spf1 include:spf.protection.outlook.com ~all
Merge them into one SPF record:
v=spf1 include:_spf.google.com include:OTHERSERVICE ~all
Type: TXT
Host / Name: @
TTL: Auto or 3600
You can only have one SPF record per domain.
DKIM adds a digital signature to your emails so receiving servers can verify authenticity.
Go to Google Admin Console
Apps → Google Workspace → Gmail
Authenticate Email → Generate DKIM
Select:
Key length: 2048 bits
Selector: google
Add the provided TXT record to your DNS
Click Start authentication
google._domainkey.yourdomain.com
v=DKIM1; k=rsa; p=PUBLIC_KEY
Microsoft provides two DKIM records:
selector1._domainkey.yourdomain.com
selector2._domainkey.yourdomain.com
Each record will contain:
v=DKIM1; k=rsa; p=PUBLIC_KEY
After adding both records:
Go to Microsoft Defender
Enable DKIM for your domain
DMARC tells receiving servers what to do if SPF or DKIM checks fail and enables reporting.
v=DMARC1; p=none; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=1;
Type: TXT
Host / Name: _dmarc
TTL: Auto
