Email deliverability: SPF, DKIM, and DMARC explained simply

The short version

• SPF tells receivers which servers may send for your domain.
• DKIM cryptographically signs messages so receivers can verify integrity.
• DMARC tells receivers how to handle failed checks and where to send reports.

You need all three to build long-term sender trust, especially for cold or semi-cold personal outreach.

SPF: common mistakes to avoid

• Publishing multiple SPF TXT records for one domain.
• Forgetting to include your SMTP provider in SPF include rules.
• Using overly permissive policies for too long.

DKIM: what good looks like

Your SMTP provider gives you DNS records for DKIM selectors. Add them exactly as provided, then verify status before sending campaigns. Rotate keys periodically if your provider supports it.

DMARC rollout plan

1. Start with p=none and collect reports.
2. Move to p=quarantine when alignment looks healthy.
3. Use p=reject when unauthorized sending is controlled.

Operational tips beyond DNS

• Warm up new domains and mailboxes gradually.
• Keep complaint and bounce rates low with suppression handling.
• Avoid sudden volume spikes.
• Use plain, honest copy instead of hype-heavy subject lines.

Related guides