Email Security Records

In-depth guides to every email authentication and security DNS record — what they do, how they work, and how to configure them correctly.

SPF

Sender Policy Framework

Authorizes which mail servers can send email on behalf of your domain.

DKIM

DomainKeys Identified Mail

Adds a cryptographic signature to email to prove integrity and authenticity.

DMARC

Domain-based Message Authentication

Ties together SPF and DKIM with a policy to prevent spoofing.

BIMI

Brand Indicators for Message Identification

Displays your brand logo in the inbox of supporting email clients.

MTA-STS

Mail Transfer Agent Strict Transport Security

Enforces TLS encryption for inbound email delivery.

TLS-RPT

SMTP TLS Reporting

Reports TLS connection failures encountered when delivering email to your domain.