Most often because your domain lacks SPF, DKIM or DMARC records, or they’re wrong. These three DNS records prove your mail is really from you. We set up all three for every domain we host.
What each record does
| Record | What it does |
|---|---|
| SPF | Lists the servers allowed to send mail for your domain |
| DKIM | Signs each message, so the receiving server can check it came from your domain and wasn’t changed on the way |
| DMARC | Tells receiving servers what to do with mail that fails the SPF and DKIM checks |
Mail that carries them is less likely to land in spam, and harder for someone else to fake.
Our own domain as an example
Our DMARC record is set to p=reject: a receiving server refuses any message that claims to be from us and fails the checks.
⟨to add: the worked example, record by record⟩
If your mail still lands in spam
- Your domain and mailboxes are with us: the records are already in place. Raise a ticket from Support in your dashboard and we’ll check them.
- You send through Google Workspace or Microsoft 365: their servers need to be in your records too. See using them with your hosting.
- You send newsletters from another service: it needs its own records. ⟨to add: how to check which records your domain has⟩