Answer
SPF vs DKIM vs DMARC
Compare SPF, DKIM, and DMARC in plain English and learn why all three matter for domain email sending.
In short
SPF says who can send for your domain, DKIM proves the message is signed, and DMARC tells receivers what to do when authentication fails.
Key points
- SPF authorizes sending servers.
- DKIM signs messages with your domain.
- DMARC sets policy and alignment rules.
- Together, they improve trust and protect your domain.
| Record | Plain-English job |
|---|---|
| SPF | Who is allowed to send? |
| DKIM | Was this message signed correctly? |
| DMARC | What should happen if checks fail? |
| All three | Better domain trust and protection |
SPF authorizes senders
SPF lists the servers and services allowed to send email for your domain. It helps block unauthorized senders.
DKIM signs messages
DKIM adds a signature that receiving servers can verify with a DNS public key. It helps prove the message is legitimate.
DMARC connects the policy
DMARC uses SPF and DKIM results to decide whether mail should pass, be quarantined, or be rejected.
Use your domain for customer email
Start free with 3,000 emails/month, your own domain, and no credit card.
Start sending free