What is SPF?

SPF (Sender Policy Framework) is a DNS TXT record that tells the world which mail servers are authorised to send email on behalf of your domain. When someone receives an email from your domain, their mail server checks your SPF record to see if it came from an authorised source.

Without SPF, anyone can send email claiming to be from your domain. With SPF, receiving servers can detect unauthorised senders and reject or flag their mail.

A basic SPF record for 0724 Hosting looks like this:

v=spf1 include:yourmailserver.co.za ~all

Contact 0724 Hosting support for the specific SPF record to use with your plan.

What is DKIM?

DKIM (DomainKeys Identified Mail) uses cryptographic signing to verify that an email genuinely came from your domain and was not altered in transit. Your mail server signs outgoing emails with a private key. The receiving server checks the signature against a public key published in your DNS.

DKIM protects against email tampering and significantly improves your domain's reputation with email providers like Gmail, Microsoft, and Outlook.com.

DKIM is configured in DirectAdmin and requires a TXT record in your DNS. 0724 Hosting can assist with this setup.

What is DMARC?

DMARC (Domain-based Message Authentication, Reporting and Conformance) is a policy record that tells receiving mail servers what to do when SPF or DKIM checks fail. It also enables reporting so you can see who is sending email using your domain.

A basic DMARC record that monitors without rejecting mail:

v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.co.za

Once you are confident your legitimate email is passing SPF and DKIM checks, you can update the policy to quarantine or reject failing mail:

v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.co.za

Do I need all three?

Yes, for the best results. SPF alone is not enough because it can be bypassed in certain configurations. DKIM alone does not prevent domain spoofing in the visible From address. DMARC binds the two together and adds a policy enforcement layer. All three working together provide the most complete email authentication setup.

Why are my emails going to spam?

Missing or incorrect SPF, DKIM, or DMARC records are among the most common reasons business emails land in spam. Other factors include sending volume, domain reputation, and the content of the email. If your emails are landing in spam, checking and correcting your DNS authentication records is the right first step.

Getting help

0724 Hosting assists with SPF, DKIM, and DMARC setup for all hosted domains. If your domain is registered or hosted elsewhere, we can still guide you through the DNS changes needed. Contact support or see our DNS support page for more information.