SPF, DKIM, DMARC by ESP
Step-by-step setup with the exact records, the order to publish them, and the verification check. Pick your email service provider — the rest writes itself.
- workspace.google.com
Google Workspace
Google Workspace (formerly G Suite) handles mail for many small and mid-size businesses. The DNS setup is well-documented but the DKIM step requires generating the key inside the Admin console first.
- microsoft.com
Microsoft 365
Microsoft 365 (Exchange Online) is the other major business mail platform. DKIM in Microsoft 365 uses two CNAMEs that point at Microsoft-hosted keys — different from Google's single-record approach.
- sendgrid.com
SendGrid
SendGrid (Twilio) is one of the most-used transactional ESPs. Their domain authentication wizard generates per-account CNAMEs you publish on a sending subdomain — never on your apex.
- mailgun.com
Mailgun
Mailgun's authentication is API-driven and slightly more developer-oriented than SendGrid's. They issue both SPF and DKIM records when you add a domain.
- aws.amazon.com
Amazon SES
Amazon SES (Simple Email Service) is the cheapest at-scale transactional ESP. Setup is more steps than the polished SaaS ESPs but the records are stable and well-documented.
- postmarkapp.com
Postmark
Postmark is a transactional-only ESP with strict acceptable-use enforcement. Their authentication setup is the simplest of the major ESPs.
- mailchimp.com
Mailchimp
Mailchimp (Intuit) is primarily a marketing ESP. Domain authentication is required as of 2024 to send to Gmail and Yahoo at any volume.
- brevo.com
Brevo
Brevo (formerly Sendinblue, rebranded 2023) is a marketing + transactional ESP popular outside North America. Their setup uses delegated subdomains similar to SendGrid.
- zoho.com
Zoho Mail
Zoho Mail is a budget-friendly business mail platform. The DKIM step is unusual — you generate the selector inside the Zoho admin console rather than using a fixed name.
- fastmail.com
Fastmail
Fastmail is a privacy-oriented business mail provider. Their DKIM CNAMEs are the cleanest of any major ESP — three records, fixed names, point at hosted keys.