What SPF, DKIM, and DMARC are, without jargon
Photo: Avila Ops Tecnologia
SPF, DKIM, DMARC are domain records answering Gmail and Outlook: “did this email really come from the domain owner’s company?” SPF authorizes senders. DKIM signs messages. DMARC decides what happens when the answer is no. Without all three, email looks forged.
Spam filters verify identity before text. Small businesses with correct records tend to deliver more than large ones forgetting configuration.
Each in one sentence
| Record | Function | Analogy |
|---|---|---|
| SPF | Lists servers permitted to send using your domain | Authorized letterhead users |
| DKIM | Adds digital signatures only your domain can generate | Notarized signatures |
| DMARC | Tells providers to accept, spam-folder, or reject when neither SPF nor DKIM confirms your domain, and where reports go | Doorman rules for mismatched badges |
All reside in DNS, the directory locating domain services. Explanation: avilaops.com/glossario/dns.
How do I check all three?
Open your company’s email in Gmail, choose three dots, “Show original.” Top lines show SPF, DKIM, DMARC with PASS or FAIL. Three PASS is correct. FAIL or “none” means missing or incorrect records.
Common mistake: businesses add promotional tools after email services. SPF knows only the first. Every sending tool needs authorization or messages tend toward spam. Other causes: what spam folders are and why messages land there.
What to do now
Have domains but unknown records? Request assessment. Still using free email? Get contato@suaempresa.com.br with all three preconfigured, R$ 10 per mailbox/month, ready today: avilaops.com/email-profissional or contact us on WhatsApp: wa.me/5517997811471.
Frequently asked questions
Must I configure these myself?
No. Domain/email administrators do it in minutes with DNS access. Require all three active.
Do these work for free Gmail?
Not under your control. Google owns @gmail.com and its records. Only own-domain email gives you control.
Why spam after configuring all three?
Records solve identity. Reputation, content, lists still hurt delivery despite verification.
Turn what you learned into your next step.
Tell us about your company and what you want to improve. We can explore the right tools, integrations or custom project together.