Try It

2024: Google and Yahoo's email authentication requirements simplified

Table of Contents

A beginner's guide to setting up DKIM and DMARC for email security ​

Your email needs authentication

With so many spam and scam emails flying around, you need to tell the email accounts you’re contacting that your email is legitimate so you don’t end up in people’s junk

In 2022, 20.4% of emails either went to spam or remain undelivered – setting up your DKIM and DMARC will help prevent this – and protect your brand’s reputation.

Why is this so important?

Effective from 1st February 2024, Yahoo and Google will both only be accepting emails with DKIM and DMARC set up. 

Why? To reduce scams, spam and phishing emails. This is an important and significant update because these companies also provide email services for some of the larger media organisations around the globe, and if the settings they are looking for are missing, then your emails will start to be rejected.

What are the security layers?

If you don’t know who hosts your domain, contact your IT or tech department, they might be happy to set up your authentication for you, or, if it’s your responsibility, continue reading to follow our step-by-step guide.

Disclaimer:

The instructions for setting up DKIM and DMARC may vary depending on the DNS (Domain Name System) provider. The steps provided are a general guide and may not be applicable to all scenarios. Be aware that you need to set up your DKIM before setting up DMARC.

What is DKIM?

DKIM (DomainKeys Identified Mail) is one defence to protect your emails from spammers who pretend to be you, or from your emails getting mistaken as spam and ending up in the spam folder.

Think of DKIM as a secret code for emails. Once you’ve set up DKIM, every time you send an email, this code will put a special mark on it. This mark helps each person receiving your emails know it really came from you and not from spammers trying to hide behind your domain.

Setting up DKIM

Add the required DKIM settings to your domain using the process below:

Step 1
Email your Roxhill account manager, who will respond with the specific settings that need to be added to your domain as CNAME records.

Step 2
Head to your domain hosting site and login. Go to settings.

Step 3
Click on DNS settings or similar. You will need to add where indicated the three settings supplied as the new CNAME records, using the code/key that your Roxhill account manager sent back to you.

Step 4
Hit save! You can test whether your DKIM has been successful with a DKIM record checker.

What is DMARC?

DMARC (Domain-based Message Authentication, Reporting, and Conformance) works together with DKIM and SPF to make sure your emails are secure. DMARC instructs the receiver’s email server on how to manage your emails if they do not pass security checks.

First, you need to set up your DKIM before setting up DMARC.

Setting up DMARC

Step 1
Head to your domain hosting site and login. Go to settings and select the area where you can create a record.

Step 2
It is likely you’ll then see a drop-down of DNS record types (although this changes based on provider). Select TXT.

Step 3
In the name section, add _dmarc

Step 4
In the value section, you’ll need to add both and p

The minimum DMARC setup you should use is:

v=DMARC1; p=none;

This means that no action will be taken if emails fail DMARC checks.

Step 5
Hit save. You can then run a DMARC Record Check to verify it’s all worked correctly.

Other helpful links

Below is also a list of the main domain hosting sites own instructions:

Hopefully, these instructions help. If you have any questions about this process, please contact your Roxhill account manager.

We use cookies to enhance site navigation, analyze site usage, and assist in our marketing efforts. Accept cookie settings by clicking the button.
You can view our Cookie Policy or Privacy Policy.