How to make my Sender address SPF, DKIM & DMARC compliant

Webpower ensures proper delivery of your emails. The only thing you have to arrange yourself is setting up the right authentication. Your sender address must be SPF, DKIM & DMARC compliant to ensure the best deliverability to the recipient's inbox. 

DMARC, SPF and DKIM are email security standards. By setting these on your sending address domain (contact@domain.com) you prevent unauthorized individuals from sending emails from this domain. If you're confused by the technical terms used in this article, please contact a colleague from your IT department or someone from a hosting party to help you make sure everything is in order.

Follow these steps to make sure your sender address is compliant:

  1. Check which Sender address is in use in your Webpower license
  2. Make sure your SPF, DKIM & DMARC records are valid
    And if necessary:
  3. If needed: set up SPF, DKIM & DMARC
    Preferred DNS settings for Webpower use

If you run into any trouble while setting this up, please check the FAQ section below or contact support.

 

Check which Sender addresses are in use in your Webpower license

You will find the list with all of your current Sender Addresses under Setup > Sender Addresses. It concerns the From address. Click Insert to access the dropdown list of Sender Domains.

Please note that you have to set up DMARC for every top domain. So if you use mail.domain1.nl and mail.domain2.nl, you need to check and set up DMARC for both. So in that case, you have to do the following steps twice.

 

Make sure your SPF, DKIM & DMARC records are valid

Check 1: Is your DMARC record valid?

Check the status of your DMARC record on this website: https://dmarcadvisor.com/dmarc-check/

Good to know: the policy ("p" tag) 'None' is also a valid policy. Although it does not prevent abuse on your domain, you will receive DMARC reports.

Check 2: Are the SPF & DKIM records Webpower proof?

Check the content of your DNS records on this website: https://toolbox.googleapps.com/apps/dig/ 

On this website, you can see which records are currently set in the DNS of the sender address. These are Webpower proof if the Preferred DNS settings for Webpower use as shown below, appear in these records.

 

If needed: set up SPF, DKIM & DMARC

Have you not yet set up DMARC, or are your SPF & DKIM records not yet Webpower proof? Share the preferred DNS settings below with your system administrator. Please note: the parts [local_domain] and [license_name] are specific to you and therefore need to be adjusted.

You can find this in the following places in Webpower:

  • [local_domain]: this is the domain of the sender address you want to use (Setup > Sender Addresses > FROM address > Click "Insert" to access the dropdown list of Sender Domains)
  • [license_name]: You can find this in the URL of your Webpower account: licensename.webpower.eu

Preferred DNS settings for Webpower use

type     A 
name     [local_domain] 
record   91.197.72.25

type     MX
name     [local_domain]
record   virtualmail.webpower.eu
prio     10

type     TXT
name     [local_domain]
record   "v=spf1 a mx include:virtualmail.webpower.eu ~all"

== DKIM record 1
type     CNAME
name     wps1._domainkey.[local_domain]
record   wps1._domainkey.[license_name].webpower.eu.

== DKIM record 2
type     CNAME
name     wps2._domainkey.[local_domain]
record   wps2._domainkey.[license_name].webpower.eu.

type     TXT
name     _dmarc.[local_domain]
record   v=DMARC1; p=reject; rua=mailto:dmarc@[local_domain]

Adding your first DMARC record? Use p=none
To demonstrate to receiving parties that you take email authentication seriously, it is important that you set a DMARC record. However, if you would rather not have a handling policy yet, we advise you to choose p=none. Then you benefit from having DMARC reports, but do not actively block emails that are sent without a valid DKIM record. Later on, if you want to tighten your email authentication, you can change the policy to p=quarantine or p=reject.

If you experience any problems setting up SPF, DKIM and DMARC, please contact support.

Do you already have a DMARC record for non-Webpower purposes?
Do not replace your current record with the recommended Webpower settings, but merge them.

 

Frequently Asked Questions

What happens if I don't set up DMARC and still send emails?
Then there is a chance that a large part of your emails will not be delivered to the recipient's inbox. Receiving parties, such as Gmail and Yahoo, can't verify that you're really allowed to send emails using the From address, and therefore they can't rule out that you are a spammer. To protect the recipient from spam, email clients might decide to not deliver your email. This may affect all emails sent from your sending domain.

Should I set up DMARC only for Spotler Webpower? Or also for other systems?
You appear most reliable if you optimize your SPF, DKIM and DMARC settings for all systems from which you send email with your sending domain. Consider, for example, system emails from your webshop.

I already configured SPF, DKIM & DMARC for my main domain, is that sufficient when I use subdomains?
Unless you want to have the DMARC handling to be different, it's enough to set up DMARC for the main domain. An example of a main domain is name@spotler.nl and an example of a subdomain is name@mail.spotler.nl.