Email authentication best practices: SPF, DKIM, and DMARC

Email authentication proves to mail servers that an email actually comes from your business. 

Without these settings, others can pretend to be your brand, and providers like Google or Yahoo are more likely to send your messages to the spam folder. 

Meta and Google now require these settings for any business sending large amounts of mail. Here is how you manage these in ZEPIC and by using standard tools.

Why Authentication is Necessary for Deliverability

• Prove Identity: Shows mail servers that ZEPIC has your permission to send mail on your behalf.

• Prevent Spam Flags: Correct records prevent your mail from being marked as suspicious by security filters.

• Protect Brand: Prevents hackers from using your domain name to send fake emails to your customers.

Step-by-Step Guide: Setting Up Your Records

Step 1: Set Up SPF (Sender Policy Framework)

Add the ZEPIC sending IP or "include" statement provided in your settings to your DNS. Important: You must only have one SPF record; having two will cause authentication to fail.

Step 2: Enable DKIM (DomainKeys Identified Mail)

Generate the DKIM keys in ZEPIC, then copy and paste the "CNAME" or "TXT" records into your DNS settings. This adds a digital signature to every email to prove the content wasn't altered.

Step 3: Set Up DMARC

Start with a "p=none" policy to monitor reports. Once confirmed, move to "p=quarantine" and eventually "p=reject" to fully block unauthorized mail.

Step 4: Verify in ZEPIC

Once DNS records are saved, click "Verify" on your domain connector. Ensure all three status lights are Green before sending your next campaign.

Best Practices: Record Maintenance

Want to know how you can go a step further by using email automation? 

Check out our article on using Lists and segments for email campaigns!