✅ SPF
✅ DKIM
This instructional article will demonstrate the Selzy configuration process of Sender Policy Framework (SPF), DomainKeys Identified Mail (DKIM) Signatures to ensure Autotask passes the DMARC alignment check and eliminates spam from your domain, and increases security.
The SPF record identifies the mail servers and domains that are allowed to send email on behalf of your domain. The DKIM record, on the other hand, is a specially formatted DNS TXT record that stores the public key the receiving mail server will use to verify a message’s signature. These email authentication methods will be used to prove to ISPs and mail services that senders are truly authorized to send email from a particular domain and are a way of verifying your email sending server is sending emails through your domain.
1. Click on your profile, then go to the Settings page.
2. Before adding your domain and setting up SPF and DKIM, go to the Confirmed Emails page and add a corporate email address associated with the domain you want to authenticate for sending emails.
In this example, I’ve added: levonkoussaian@dmarc-test-9.online
Once the email address is added and verified, you will see its status marked as Enabled in green.
Important Note: You will be able to add a domain only if you have a confirmed email associated with that domain that you want to add in Selzy.
3. Navigate to the Domain Authentication page, click the Create button, and a pop-up will appear where you need to enter your domain name.
4. Once added, the Selzy system will provide you with the required SPF and DKIM records (two TXT records), which you need to add to your domain’s DNS zone.
5. Update your DNS TXT Record for SPF at your domain provider (We will show examples with Cloudflare) and click on Save
Important Note: Make sure you don’t create multiple SPF TXT records for Office 365 on one domain. If you do, SPF will return a PermError.
If you are using multiple IPs, ESPs, and third-party services for your various email strategies, you should include them in a single SPF Record.
E.g v=spf1 ip4:17.67.137.221 include:spf.selzy.com include:thirdpartyservice.com ~all
6. For DKIM, you need to publish the provided TXT record into your DNS zone, just like you did for the SPF record:
7. Once both TXT records are correctly implemented in your DNS, return to your Selzy dashboard. After waiting some time for the records to propagate, you will see your domain status marked as Enabled in green.
Important Note: The status update takes time. You might need to wait from half an hour to a couple of hours for the status to change.
To refresh the status manually, click on the two arrows next to the status.
That’s it! You’ve successfully authenticated your outgoing mail stream from Selzy using SPF and DKIM. Your emails are now more secure and less likely to be marked as spam.