Before you change business email
Changing how your business sends email? Check its DMARC and SPF records first.
See the DMARC and SPF records your domain publishes now. Get a dated finding and a clear question for whoever manages your email or DNS.
Free. No account needed. Taverlo checks public records, not messages or your inbox.
Business email setup
Use this order for SPF, DKIM, and DMARC.
Start with every service that sends your email. Check real messages before asking other providers to block mail that fails authentication.
Your email service tells you which values to use. You publish the records where your domain’s DNS is managed.
-
List what sends mail for you.
Include your business mailbox, invoices, store, website forms, and newsletters. If someone else manages one of these, ask which service sends its mail.
-
Set up SPF and DKIM with each sender.
Follow each service’s instructions. SPF lists permitted sending servers in one record for your domain; DKIM signs messages at the sending service. Do not publish a separate SPF record for each service.
-
Add DMARC in monitoring mode.
Use your provider’s instructions to publish a monitoring policy with a report destination. Review those reports before asking providers to quarantine or reject mail that fails authentication.
-
Check the records and real messages.
Run Taverlo’s public SPF and DMARC check. Then send from each service and use its message results and DMARC reports to check authentication. Move toward blocking only after your legitimate mail is accounted for.
Know what you checked
A published record is one part of the answer.
Taverlo checks public SPF and DMARC records. It can show what your domain publishes and whether those records are readable. It cannot confirm DKIM signing or how a real message was handled.
Your sending service and reports check real mail. Use them to verify each sender before you change DMARC from monitoring to quarantine or reject. A public record check cannot diagnose a rejection or promise inbox placement.
Check your domain above Understand a public-record result Why SPF can pass while DMARC failsProvider instructions
Use the steps for your email service.
These guides explain the values and checks for their own services. If you use another provider, follow that provider’s instructions instead of copying example records.