Dev.to
7/22/2026

The original title is: "SPF, DKIM, DMARC: the 15-minute setup that actually passes"
Original: SPF, DKIM, DMARC: the 15-minute setup that actually passes
Short summary
A practical 15-minute guide to setting up SPF, DKIM, and DMARC DNS records for email authentication. It covers exact TXT record formats, common mistakes (duplicate SPF records, proxied DKIM CNAMEs, jumping to p=reject too early), and verification steps using dig and Gmail's Show Original view. The guide emphasizes starting with DMARC p=none, monitoring reports for weeks, then escalating to quarantine and reject.
- •Exact SPF, DKIM, and DMARC DNS records with one-sentence explanations each
- •Three common mistakes: duplicate SPF records, proxied DKIM CNAMEs, premature p=reject
- •Verify with dig commands and Gmail Show Original — all three must say PASS
Generated with AI, which can make mistakes.
Is this a good recommendation for you?



