Email security

DMARC — protecting your email from fraud & spoofing

Email providers such as Microsoft, Google, and Yahoo are tightening their security to reduce spam. DMARC is a key part of keeping your emails delivered and your customers protected.

Talk to us about DMARC Email & DNS setup

What is DMARC?

How DMARC, SPF, and DKIM work together

We have already done an initial audit of your domains and DNS records — we have been busy checking and editing your SPF records, setting up DKIM, and adding DMARC records.

We now need to monitor the email delivery of your domains to check for compliant and non-compliant emails. To avoid large amounts of time manually checking daily reports, we are using a new system to automate the reporting.

We will be able to see what sources you use to send out emails and whether they are reaching your customers. The sending sources are your email server and things like your website, your CRM, your accounting system, your marketing platform, and your newsletter system.

📋

Unauthenticated email sources must be identified

Unauthenticated email servers must be identified, confirmed legitimate, and added to your DNS. Failure to do this will result in your emails not being delivered.

🎣

Stop phishing attacks on your customers

Another benefit of configuring your sending servers is that it helps stop phishing attacks sent to your customers. You don’t want to receive fake emails — and the same goes for your customers receiving fake emails pretending to be you.

How it works

SPF, DKIM, and DMARC explained

SPF (Sender Policy Framework)

Tells the internet what server your emails can be trusted from. For example, your email server and your website (but not someone impersonating you).

DKIM (DomainKeys Identified Mail)

Tells the internet that all emails need to be digitally signed by your email server, ensuring the legitimacy of the email. DKIM helps stop attackers from sending emails that look like they come from your domain by encrypting a signature within every outbound message header.

DMARC (Domain-based Message Authentication)

Builds on SPF and DKIM to help protect from fake (phishing) emails sent to you and your customers. It tells receiving mail servers what to do when an email fails authentication checks.

Obviously, you don’t want to receive fake emails — the same goes for your customers receiving fake emails pretending to be you. DMARC helps prevent both.