# Set up SPF, DKIM and DMARC | GTM and Outreach

Source: https://exntra.in/help/dns-records

[Help center](/help)

Getting started

-   [Start here](/help/start-here)

Mailboxes

-   [Connect a Google Workspace mailbox](/help/connect-google)
-   [Connect Microsoft 365](/help/connect-microsoft)
-   [Connect Zoho Mail](/help/connect-zoho)
-   [Connect any other provider (SMTP and IMAP)](/help/connect-smtp)

Reaching the inbox

-   [Sending limits and the slow start](/help/slow-start)
-   [Why we don't do warm-up](/help/no-warmup)
-   [Set up SPF, DKIM and DMARC](/help/dns-records)
-   [Domain and server checks](/help/domain-health)

Contacts

-   [Import contacts](/help/import-contacts)
-   [How we check contacts](/help/contact-checks)
-   [Email providers (ESP sending and matching)](/help/email-providers)
-   [Your blocklist](/help/blocklist)

Campaigns

-   [Create a campaign](/help/create-campaign)
-   [Write your emails](/help/write-emails)
-   [Schedule and smart scheduling](/help/schedule)
-   [Unsubscribe options](/help/unsubscribe)
-   [Preview, test and review](/help/test-and-review)
-   [Understand your results](/help/campaign-results)
-   [Bounces and auto-pause](/help/bounces)
-   [Pause, edit and restart a campaign](/help/manage-campaign)
-   [1–100 testing](/help/ab-testing)

Inbox and replies

-   [The Master Inbox](/help/master-inbox)
-   [Automatic replies](/help/auto-replies)

Account and team

-   [Team members and roles](/help/team-roles)
-   [Workspaces](/help/workspaces)
-   [HubSpot, Salesforce and moving from other tools](/help/integrations)
-   [API, webhooks and AI agents](/help/api-and-ai)
-   [Plan and billing](/help/billing)
-   [When our support team opens your account](/help/support-access)
-   [Change the app's language](/help/language)
-   [Two-step sign-in](/help/two-step-sign-in)

[Help center](/help) / Reaching the inbox Englishहिन्दीবাংলাதமிழ்తెలుగుमराठीગુજરાતીಕನ್ನಡമലയാളംਪੰਜਾਬੀاردوالعربيةEspañolPortuguês (Brasil)FrançaisDeutschItalianoBahasa IndonesiaTürkçeРусский日本語한국어简体中文

# Set up SPF, DKIM and DMARC

The three DNS records every sending domain needs, with steps for Google, Microsoft and Zoho.

[Open in the app →](https://app.example.com/#/mailboxes)

Google and Yahoo require these three records from anyone who sends a lot of email. Without them, your emails go to spam or are refused.

You add them where your domain’s DNS is managed, for example Cloudflare, GoDaddy or Namecheap.

## SPF: who may send for your domain

Add one **TXT** record on your domain:

-   Google Workspace: `v=spf1 include:_spf.google.com ~all`
-   Microsoft 365: `v=spf1 include:spf.protection.outlook.com -all`
-   Zoho (India): `v=spf1 include:zoho.in ~all` (use `zoho.com` outside India)
-   Other providers: their help pages list the include.

**Only one SPF record.** If you already have one, add the new include to it. For example: `v=spf1 include:_spf.google.com include:zoho.in ~all`.

## DKIM: a signature on every email

-   **Google**: In Google Admin, open Apps, then Google Workspace, then Gmail, then **Authenticate email**. Generate a key, add the TXT record it shows, then click **Start authentication**.
-   **Microsoft**: In Microsoft Defender, open **Email authentication settings**, then **DKIM**. Add the two CNAME records it shows, then turn DKIM on.
-   **Zoho**: In Zoho Mail Admin, open **Domains**, then **Email configuration**, then **DKIM**. Add a selector, copy the TXT record to your DNS, then verify.
-   **Other providers**: turn on DKIM signing in their admin, then add the record they give you.

Choose a **2048-bit** key when you can.

## DMARC: what to do with fakes

Add a TXT record named `_dmarc` with the value `v=DMARC1; p=none`.

This is enough to start. After a few weeks of SPF and DKIM passing, change it to `p=quarantine`.

## Check it worked

DNS changes can take up to an hour. Then open your domain on the **Mailboxes** page and click the refresh button. Each record shows a green tick, or the exact fix.

## Common mistakes

-   **Two SPF records.** SPF fails. Merge them into one.
-   **Too many lookups.** SPF allows 10 DNS lookups. Remove includes for tools you no longer use.
-   **Ending in +all.** This lets anyone send as you. Use `~all` or `-all`.

See also [Domain and server checks](/help/domain-health).

[Previous**Why we don't do warm-up**](/help/no-warmup) [Next**Domain and server checks**](/help/domain-health)

**Still stuck?** Use the chat button inside the app, or email us at [support@example.com](mailto:support@example.com).