Set up SPF, DKIM and DMARC
The three DNS records that prove your email is really from you.
Updated 20 October 2026
Gmail, Yahoo and Outlook check these records before trusting your email. They live in your domain's DNS (GoDaddy, Hostinger, Cloudflare and so on), not in Outly, so you set them up once with your domain provider.
What each one does
SPF lists the servers allowed to send as your domain. DKIM adds a signature to every email that receivers check against a key in your DNS. DMARC tells receivers what to do when SPF and DKIM fail, and where to send reports.
- Run your domain through the free SPF, DKIM & DMARC checker. It shows what is missing and the exact record to add for Google Workspace or Microsoft 365.
- SPF: add or fix one TXT record on your domain. Keep only one SPF record; two break it.
- DKIM: turn it on in your Google Workspace admin console or Microsoft 365 Defender portal, then add the record it gives you to DNS.
- DMARC: add a TXT record at _dmarc.yourdomain. Starting with p=none and a reporting address is fine.
- Wait for DNS to update (often minutes, sometimes up to a day) and run the checker again.
Good to know
Passing all three doesn't guarantee the inbox. It is the entry ticket. Placement also depends on your domain's reputation, how much you send and whether people reply.
Email support@originutech.in or message us on WhatsApp. Balu, who builds Outly, answers both himself.