Configure DKIM and DMARC for your emails

Configure DKIM and DMARC for your emails

The e-mail delivreability depends on the authentication of your messages. SPF, DKIM and DMARC tell suppliers (Gmail, Outlook...) that your shipments from theweb hosting Anthony IT Solutions are legitimate and limit the usurpation of your domain.

This guide is complete creation of e-mail accounts detailing the DNS configuration of DKIM signatures and DMARC policy on your domain hosted at Anthony IT Solutions.

What you need

• E-mail accounts created on your web hosting
• Access zone DNS, guide DNS
• SPF registration in place or to be completed
• Address [email protected] for reports

Understand SPF, DKIM and DMARC

The three mechanisms are complementary. Gmail and Yahoo require correct authentication for professional volumes.

Verify and complete the FPS

1. SPF Registration

   TXT on the root domain. Example: v=spf1 include:_spf.anthony-it-solutions.fr ~all, use the exact value of the mail panel.

2. Only one FPS

   A domain must only haveone SPF registration. Merge the include: if you send via CRM or newsletter.

3. Include third-party services

   Mailchimp, Brevo, Sendinblue: add their include: in the same recording.

4. Test SPF

   Send an e-mail test to mail-tester.com and check the SPF score (target 9/10+).

Enable DKIM

1. Mail Panel

   Web hosting panel → E-mail → enable DKIM for the domain.

2. Copy TXT

   The panel displays host name (default._domainkey) and long TXT value. Create the recording in the DNS area.

3. Propagation

   Wait 15 minutes at 2:00. The Header DKIM-Signature must appear in the e-mails sent.

4. Do not change the key

   Regenerate from the panel if suspected compromise, do not partially copy the public key.

Configure DMARC

1. Initial registration

   Name: _dmarc. Value: v=DMARC1; p=none; rua=mailto:[email protected], surveillance mode.

2. Analyze reports

   XML reports on rua list legitimate and fraudulent sources for 24-48 hours.

3. Gradually hardening

   After 2-4 stable weeks: p=quarantine then p=reject If SPF and DKIM pass.

4. Alignment From

   The domain in the From header must match the SPF/DKIM domain for DMARC pass.

Good shipping practices

• SMTP web hosting for forms and WooCommerce
• No mass mailing since mutualised, Brevo/Mailchimp for newsletters
• Domain From aligned with DKIM/SPF
• Addresses postmaster@ and abuse@ valid
• **Check configuration**, see detailed procedures.

Troubleshooting

• SPF fail, Double SPF or server not listed.
• DKIM fail, TXT incorrectly copied or sent via unsigned third party SMTP.
• Spam, IP reputation, content or incomplete authentication.
• DMARC goes back too soon, Go back to p=none.

Frequently Asked Questions

DKIM mandatory?
Strongly recommended; de facto requirement for Gmail/Yahoo in volume.

DMARC without DKIM ?
Possible if SPF aligned, but less reliable.

Panel manages DKIM ?
Generates the key; you publish the TXT DNS.

External newsletters ?
Add their SPF and DKIM inclusion in addition to the hosting.

Related guides

• E-mail accounts
• DNS area
• Subdomains
• SSL

See also our web hosting offer and all the procedures on wiki web hosting.