When you send an email, the receiving server asks: “Is this message really from this domain?” These three records help it decide.
SPF: who may send
SPF lists the servers allowed to send email for your domain. If a message arrives from a server not on the list, it looks suspicious.
DKIM: a signature
DKIM adds a digital signature to each message. The receiver checks the signature against a public key in your DNS, which shows that the message was not altered and came from an authorised sender.
DMARC: the policy
DMARC tells receivers what to do when SPF or DKIM fails (nothing, quarantine or reject) and where to send reports. Start with a monitoring policy, review the reports, then tighten it.
Other things that affect delivery
- Sending reputation: a new domain that suddenly sends many messages looks risky
- Content: all-capitals subject lines, many links and attachments can raise flags
- Lists: only email people who expect to hear from you
- Replies: messages that get replies tend to build a good reputation
- Consistency: use one clear “From” name and address
Quick checks
- Send a test to a Gmail or Outlook address you control
- Open the message details and look for SPF, DKIM and DMARC “pass”
- Use a free domain checker to view your records
- Fix any “fail” or missing results with your domain or hosting provider
JomeTech sets these records up when we configure business email. Contact forms on websites need the same care: see our notes on website maintenance.