Why Email Authentication Matters

Email authentication helps prevent spam and phishing by verifying that emails actually come from your domain. Proper configuration improves deliverability and prevents spoofing.

SPF (Sender Policy Framework)

SPF specifies which servers are allowed to send email for your domain.

Adding SPF Record

  1. Go to Domains → DNS Zone in EGPNL
  2. Add a new TXT record
  3. Name: @ (or leave blank)
  4. Value: Your SPF record (see examples below)
  5. Save the record

Basic SPF Record

v=spf1 a mx ~all

This allows your domain's A record and MX servers to send email.

SPF with External Services

If using additional email services like Google Workspace or Mailchimp:

v=spf1 a mx include:_spf.google.com include:servers.mcsv.net ~all
SPF Limit: SPF allows a maximum of 10 DNS lookups. Too many include: statements can cause failures.

DKIM (DomainKeys Identified Mail)

DKIM adds a digital signature to emails, proving they weren't modified in transit.

Enabling DKIM

  1. Go to Email → DKIM in EGPNL
  2. Select your domain
  3. Click Enable DKIM
  4. Copy the generated DKIM record
  5. Add it as a TXT record in your DNS

DKIM Record Format

Name: default._domainkey
Type: TXT
Value: v=DKIM1; k=rsa; p=MIGf...long-key...
EGPNL Auto-Setup: EGPNL may automatically configure DKIM when using EGPHP nameservers. Check your DNS zone.

DMARC (Domain-based Message Authentication)

DMARC tells receiving servers what to do when SPF or DKIM checks fail.

Adding DMARC Record

  1. Go to DNS Zone in EGPNL
  2. Add a TXT record
  3. Name: _dmarc
  4. Value: Your DMARC policy

DMARC Policies

Monitor Only (Start Here)

v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com

Sends reports but doesn't reject emails.

Quarantine

v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com

Failed emails go to spam folder.

Reject

v=DMARC1; p=reject; rua=mailto:dmarc@yourdomain.com

Failed emails are rejected completely.

Start with p=none: Always start with monitoring mode to identify legitimate emails that might fail. Move to quarantine/reject only after confirming everything works.

Verification Tools

Check your email authentication setup:

Recommended Setup

For best deliverability, implement all three:

  1. Add SPF record (required)
  2. Enable DKIM signing (recommended)
  3. Add DMARC record starting with p=none (recommended)
  4. Monitor DMARC reports
  5. Gradually move to stricter DMARC policy

Related Articles

Creating Email Accounts Managing DNS Records Email Delivery Issues Email Client Setup