Email Authentication Records (Microsoft)

A small but helpful piece of the larger puzzle is to make sure you have an SPF, DKIM, and DMARC record setup in the DNS records for your email address domain.


Content

  1. DMARC Record
  2. SPF Record
  3. DKIM Record

DMARC Record

You can use mxtoolbox.com to check your DMARC record.

You’ll want to set the DMARC record to: v=DMARC1; p=none;

This would be a TXT record, where the first value ( host name ) is _dmarc , and the second value ( points to content ) is v=DMARC1; p=none;


Record Type: TXT

Host / Name: _dmarc

Value: v=DMARC1; p=none;



SPF Record


LC Mail

You can use mxtoolbox.com to check your SPF record.

If you have setup your branded dedicated subdomain ( which we highly recommend ) this is an example of how your SPF record should look:

v=spf1 a:[[insert your branded dedicated subdomain]] ~all

Example: v=spf1 a:replies.yourdomainname.com ~all


Record Type: TXT

Host / Name: yourdomain.com ( root domain )

Value: v=spf1 a:replies.yourdomain.com ~all


If you send emails through another platform(s), you'll want to include them as well. Example of a domain using Microsoft Outlook for email services, and LC Mail for SMTP services:


v=spf1 a:[[insert your branded dedicated subdomain]] include:secureserver.net ~all


Example: v=spf1 a:replies.yourdomain.com include:secureserver.net ~all



FGF Mail

You'll want to add your unique dedicated email sending subdomain to this, so it will look similar to this:


v=spf1 a:[[insert your branded dedicated subdomain]] ~all

Example: v=spf1 a:fgm.yourdomainname.com ~all


Record Type: TXT

Host / Name: yourdomainname.com ( root domain )

Value: v=spf1 a:fgm.yourdomainname.com ~all


If you send emails through another platform(s), you'll want to include them as well. Example of a domain using Microsoft Outlook for email services, and FGF Mail for SMTP services:

v=spf1 a:fgm.yourdomainname.com include:secureserver.net  ~all



DKIM - Microsoft Outlook

Go to https://security.microsoft.com/dkimv2

You can use mxtoolbox.com to check your DKIM record.

This tutorial shows how to create a DKIM record for a email address created through Microsoft Outlook. If you are not using Microsoft Outlook, you would need to check the knowledge base of your current business email address service provider, to see how to set up a DKIM record, since the process for setting up a DKIM record is specific to your email service provider.


Here is Microsoft's support article going over how to setup a DKIM record for a business email addresses created using Microsoft's business email address services:

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/email-authentication-dkim-configure?view=o365-worldwide#steps-to-manually-set-up-dkim