---
title: "SPF, DKIM, DMARC setup"
description: "Setup SPF, DKIM, and DMARC to protect your domain from spoofing, phishing, and improve email deliverability"
url: https://help.manyreach.com/en/articles/15-spf-dkim-dmarc-setup
collection: "Connecting Email Accounts (Senders)"
updated: 2026-10-27
language: en
---

# SPF, DKIM, DMARC setup

Setup SPF, DKIM, and DMARC to protect your domain from spoofing, phishing, and improve email deliverability

Setting up SPF, DKIM and DMARC can feel confusing at first, but they’re important to make sure your emails reach your leads’ primary inbox. Do these few things right, and you can improve your deliverability.

**_Important:_** _Manyreach uses Email Service Provider to send emails for you, and emails are sent through connected inbox providers like Google Workspace or Microsoft 365. So you’ll need access to your domain’s DNS such as GoDaddy, Namecheap, Cloudflare, etc, and then copy values exactly, without any extra spaces or typos. And remember, DNS changes can take up to 24 to 48 hours to propagate._

## DKIM: DomainKeys Identified Mail

**What it is:** A cryptographic signature added to every email you send. It proves the message really came from your domain and wasn’t altered in transit.

**Why it matters to Manyreach users:** Strong DKIM is one of the clearest trust signals mailbox providers look for.

## SPF: Sender Policy Framework

**What it is:** A DNS record that lists which services are allowed to send mail for your domain.

**Think of it like:** A list for your domain’s senders; Only your ESPs like Google, Microsoft, etc. let in names on the list.

**Why it matters to Manyreach users:** If your outreach platform or CRM isn’t on the list, your mail can be flagged or filtered.

## DMARC: Domain-based Message Authentication, Reporting & Conformance

**What it is:** A policy that tells receivers what to do when SPF/DKIM checks fail (monitor, quarantine, or reject), and where to send you reports.

**Why it matters to Manyreach users:** DMARC helps protect your brand and steadily hardens your domain’s reputation over time.

## Configure SPF: Sender Policy Framework

SPF specifies which mail servers are allowed to send emails for your domain.

### SPF for Google Workspace

v=spf1 include:\_[spf.google.com](http://spf.google.com) ~all

### SPF for Microsoft 365

v=spf1 include:[spf.protection.outlook.com](http://spf.protection.outlook.com) ~all

### If You Use Multiple Sending Services

Merge them into **one SPF record**:

v=spf1 include:\_[spf.google.com](http://spf.google.com) include:OTHERSERVICE ~all

### DNS Settings

-   **Type:** TXT
    
-   **Host / Name:** @
    
-   **TTL:** Auto or 3600
    

You can only have one SPF record per domain.

## Configure DKIM: DomainKeys Identified Mail

DKIM adds a digital signature to your emails so receiving servers can verify authenticity.

### Google Workspace DKIM Setup

1.  Go to **Google Admin Console**
    
2.  Apps → Google Workspace → Gmail
    
3.  Authenticate Email → Generate DKIM
    
4.  Select:
    
    -   **Key length:** 2048 bits
        
    -   **Selector:** google
        
5.  Add the provided TXT record to your DNS
    
6.  Click **Start authentication**
    

#### Example DKIM Record

google.\_[domainkey.yourdomain.com](http://domainkey.yourdomain.com)

v=DKIM1; k=rsa; p=PUBLIC\_KEY

### Microsoft 365 DKIM Setup

Microsoft provides **two DKIM records**:

selector1.\_[domainkey.yourdomain.com](http://domainkey.yourdomain.com)

selector2.\_[domainkey.yourdomain.com](http://domainkey.yourdomain.com)

Each record will contain:

v=DKIM1; k=rsa; p=PUBLIC\_KEY

After adding both records:

1.  Go to **Microsoft Defender**
    
2.  Enable DKIM for your domain
    

## 3\. Configure DMARC: Domain-based Message Authentication

DMARC tells receiving servers what to do if SPF or DKIM checks fail and enables reporting.

### Recommended Initial DMARC Record

v=DMARC1; p=none; rua=[mailto:dmarc@yourdomain.com](mailto:dmarc@yourdomain.com); ruf=[mailto:dmarc@yourdomain.com](mailto:dmarc@yourdomain.com); fo=1;

### DNS Settings

-   **Type:** TXT
    
-   **Host / Name:** \_dmarc
    

**TTL:** Auto