This level is dedicated to setting up the right email infrastructure. Authentication protocols like SPF, DMARC, and DKIM are your upper hand when it comes to email deliverability. These protocols are made to build trust along with ESPs to make sure your emails land straight into the inboxes and not spam folders.
⚠️When setting up SPF, DMARC & DKIM, follow your domain provider and email provider’s guidelines.
3.1. SPF - Sender Policy Framework ✋
3.1.1. How It Works
SPF (Sender Policy Framework) is super important because it helps prevent spammers from sending emails that look like they’re coming from your domain. Without SPF, anyone could use your domain to send shady emails, which can hurt your sender's reputation and cause your emails to end up in spam folders.
Here’s how SPF works: you create a special DNS record that lists all the email servers allowed to send emails on your domain’s behalf. When you send an email, the receiving server checks that list to make sure the email came from one of the approved servers. If it matches, the email will likely land in the inbox. If it doesn’t match, it could end up in spam or get rejected.
So, SPF is like a bouncer for your email—it checks who's allowed in and who gets kicked out!
3.1.2. Setup
Use your email provider’s guidelines to set up SPF records. 👇
🔔 The process of adding an SPF record is the same as adding an MX record manually from Level 4. Use the values from the setup guides below to paste them for this specific record.
3.2. DMARC - Domain-based Message Authentication, Reporting & Conformance 📩
3.2.1. How It Works
DMARC (Domain-based Message Authentication, Reporting, and Conformance) is important because it adds an extra layer of protection for your email domain, making sure your emails are legit and helping keep phishing attacks at bay. Without DMARC, spammers could still pretend to be you, even if you’ve set up SPF and DKIM, which can hurt your sender reputation and cause your emails to be flagged as spam.
Here’s how DMARC works: it tells email servers what to do when they get an email from your domain that fails the authentication checks (like SPF or DKIM). You can set it to let those emails through, send them to spam, or reject them entirely. Plus, DMARC gives you reports on who’s trying to send emails from your domain—legit or not—so you can keep an eye on any shady activity.
Think of DMARC as your email bodyguard, making sure only the right messages get through while keeping the bad ones out!
3.2.2. Setup
Use your email provider’s guidelines to set up DMARC records. 👇
🔔 The process of adding a DMARC record is the same as adding an MX record manually from Level 4. Use the values from the setup guides below to paste them for this specific record.
💡 Pro tip: When creating your DMARC record, don’t forget to swap the end of the code you get from your email provider’s guidelines. It should be your new email, created for this new domain. That way, you’ll get the reports to that email.
3.3. DKIM - DomainKeys Identified Mail 🖊️
3.3.1. How It Works
DKIM (DomainKeys Identified Mail) is important because it helps ensure that the emails you send aren’t tampered with while they’re on their way to the recipient. It also boosts your email’s credibility, making it more likely to land in the inbox rather than the spam folder.
Here’s how DKIM works: when you send an email, DKIM adds a special encrypted signature to your message. This signature is tied to your domain and stored in your DNS records. When the receiving server gets the email, it checks the signature to make sure it matches what’s on file. If the signature is valid, the email hasn’t been altered in transit, and it’s more likely to be trusted.
So, DKIM is like a digital seal of approval that proves your email is legit and hasn’t been messed with before it reaches your prospect’s inbox.
3.3.2. Setup
Use your email provider’s guidelines to set up DKIM records. 👇
🔔 The process of adding a DKIM record is the same as adding an MX record manually from Level 4. Use the values from the setup guides below to paste them for this specific record.
💡 Pro tip 1: When setting up DKIM records, make sure you create one for each domain (up to 10 domains per workspace) you attach to your new workspace.
💡 Pro tip 2: Since your newly created DNS DKIM record needs to be authenticated, it can take up to 48 hours. Make sure to go back and check on the progress before you begin your outreach.
All records added? Awesome! Let’s move on to the next level! 😎
⏮️ Previous Next - Level 7: Connect Email Accounts and Custom Tracking Domain⏩