DKIM (DomainKeys Identified Mail) adds a digital signature to your emails that verifies the sender's domain. This helps email servers authenticate your messages and improves deliverability.

SPF (Sender Policy Framework) is a DNS record that specifies which mail servers are authorized to send email for your domain. It helps prevent email spoofing.

DMARC (Domain-based Message Authentication, Reporting & Conformance) builds on DKIM and SPF to tell receiving servers what to do with emails that fail authentication.

How does MailForge handle email authentication?

MailForge automatically sets up DKIM signing for your domain. We provide you with the DNS records you need to add, and guide you through the SPF and DMARC configuration process.

Email Authentication - DKIM, SPF, DMARC Setup

What is Email Authentication?

DKIM

Digital signature that proves your domain sent the email. MailForge automatically generates and applies DKIM signatures to all outgoing emails.

SPF

DNS record that authorizes specific servers to send email for your domain. Prevents others from sending email "from" your domain.

DMARC

Policy that tells receiving servers how to handle emails that fail authentication. Provides reporting on email authentication results.

How MailForge Sets Up Authentication

Add Your Domain: Enter your domain in the MailForge dashboard under Settings > Domains
Verify Ownership: Add a TXT record to your DNS to prove you own the domain
Configure Records: MailForge generates the DKIM, SPF, and DMARC records you need
Send: Once verified, all your emails are automatically authenticated

DNS Records You Need to Add

MailForge provides these records for your domain:

Type	Host	Value
TXT (Verification)	`mailforge`	mailforge-verify=abc123...
DKIM	`mailforge._domainkey`	k=rsa;p=MIGfMA0GCSqGSIb3...
SPF	`@`	`v=spf1 include:smtp.mailforge.dev ~all`
DMARC	`_dmarc`	`v=DMARC1;p=quarantine;rua=mailto:dmarc@mailforge.dev`

Benefits of Email Authentication

Higher Inbox Rates: Authenticated emails are less likely to be marked as spam
Brand Protection: Prevents bad actors from forging emails from your domain
Better Analytics: DMARC reports show who's sending email from your domain
Compliance: Many email providers require authentication for bulk sending

Email Authentication