Back to feed
Dev.to
Dev.to
7/22/2026
The original title is: "SPF, DKIM, DMARC: the 15-minute setup that actually passes"

The original title is: "SPF, DKIM, DMARC: the 15-minute setup that actually passes"

Original: SPF, DKIM, DMARC: the 15-minute setup that actually passes

Short summary

A practical 15-minute guide to setting up SPF, DKIM, and DMARC DNS records for email authentication. It covers exact TXT record formats, common mistakes (duplicate SPF records, proxied DKIM CNAMEs, jumping to p=reject too early), and verification steps using dig and Gmail's Show Original view. The guide emphasizes starting with DMARC p=none, monitoring reports for weeks, then escalating to quarantine and reject.

  • Exact SPF, DKIM, and DMARC DNS records with one-sentence explanations each
  • Three common mistakes: duplicate SPF records, proxied DKIM CNAMEs, premature p=reject
  • Verify with dig commands and Gmail Show Original — all three must say PASS

Generated with AI, which can make mistakes.

Is this a good recommendation for you?

Comments

Failed to load comments. Please try again.

Explore more