--- title: "SPF, DKIM and DMARC step by step – keeping your mail out of the spam folder | Hosteam" description: "Three DNS records decide whether Gmail and Outlook trust your domain. Here is what each one does and how to set them correctly." canonical_url: "https://hosteam.pl/en/blog/spf-dkim-dmarc-krok-po-kroku" last_updated: "2026-09-23T11:08:57Z" meta: "og:description": "Three DNS records decide whether Gmail and Outlook trust your domain. Here is what each one does and how to set them correctly." "og:image": "https://hosteam.pl/img/og-default.jpg" "og:title": "SPF, DKIM and DMARC step by step – keeping your mail out of the spam folder | Hosteam" --- > Index of every page on this site: [llms.txt](https://hosteam.pl/llms.txt) # **SPF, DKIM and DMARC step by step – keeping your mail out of the spam folder** Three DNS records decide whether Gmail and Outlook trust your domain. Here is what each one does and how to set them correctly. 26 August 2026 [ #dns](https://hosteam.pl/en/blog?tag=dns) [ #hosting](https://hosteam.pl/en/blog?tag=hosting) [ #poczta](https://hosteam.pl/en/blog?tag=poczta) Since 2024 Gmail and Yahoo require senders to authenticate their domain. Without correct SPF, DKIM and DMARC records, mail from your domain may land in spam or not arrive at all. The good news: it is three DNS records, set once. ## SPF – who may send on behalf of the domain SPF (Sender Policy Framework) is a TXT record listing the servers allowed to send mail from `@yourdomain.com` addresses. Example: ``` yourdomain.com. IN TXT "v=spf1 include:_spf.hosteam.pl -all" ``` - `include:` points at your hosting provider’s mail servers, - `-all` tells the receiver to reject anything outside that list. The most common mistake is publishing several SPF records – a domain may have only one. If you also use an external newsletter tool, add its `include:` to the same record. ## DKIM – a cryptographic signature on every message DKIM (DomainKeys Identified Mail) adds a signature to each message that the receiver verifies against a public key published in DNS. It proves the message was not altered in transit and that the sender controls the domain. In the Hosteam panel DKIM is one click in the mail domain settings – the panel generates the key and adds the `default._domainkey` record when the zone is hosted with us. If your DNS lives elsewhere, copy the shown TXT record into your zone. ## DMARC – what to do when things do not add up DMARC ties the two together and tells receivers how to treat messages that fail verification, and where to send reports: ``` _dmarc.yourdomain.com. IN TXT "v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com" ``` Start with `p=none` (reports only), review the reports after a week, then move to `quarantine` and eventually `reject`. ## How to check it works 1. Send a message to your own Gmail account. 2. Open “Show original” – the header shows `SPF: PASS`, `DKIM: PASS`, `DMARC: PASS`. 3. The *Mail → Domain* tab in the Hosteam panel shows the status of all three records and warns when one disappears. If any of them shows FAIL, it is usually a typo or a second SPF record. Write to us – we will check the zone with you. ## **Looking for fast hosting?** NVMe servers in a Polish data centre, 24/7 support and our own panel. [**See hosting plans**](https://hosteam.pl/en/hosting) ```json {"@context":"https://schema.org","@graph":[{"@id":"https://hosteam.pl/#website","@type":"WebSite","name":"Hosteam","url":"https://hosteam.pl/","publisher":{"@id":"https://hosteam.pl/#identity"}},{"@id":"https://hosteam.pl/en/blog/spf-dkim-dmarc-krok-po-kroku#webpage","@type":"WebPage","dateModified":"2026-09-23T11:08:57Z","datePublished":"2026-08-26T19:45:32Z","description":"Three DNS records decide whether Gmail and Outlook trust your domain. Here is what each one does and how to set them correctly.","name":"SPF, DKIM and DMARC step by step – keeping your mail out of the spam folder","url":"https://hosteam.pl/en/blog/spf-dkim-dmarc-krok-po-kroku","isPartOf":{"@id":"https://hosteam.pl/#website"},"potentialAction":[{"@type":"ReadAction","target":["https://hosteam.pl/en/blog/spf-dkim-dmarc-krok-po-kroku"]}],"primaryImageOfPage":{"@id":"https://hosteam.pl/#logo"}},{"@id":"https://hosteam.pl/#identity","@type":"Organization","description":"Polski dostawca hostingu WWW, serwerów VPS, domen i poczty biznesowej.","email":"info@hosteam.pl","legalName":"HosTeam spółka z ograniczoną odpowiedzialnością","name":"HosTeam","taxID":"7811988983","telephone":"+48 61 668 99 59","url":"https://hosteam.pl","vatID":"PL7811988983","address":{"@type":"PostalAddress","streetAddress":"ul. Leśnowolska 6","postalCode":"60-452","addressLocality":"Poznań","addressCountry":"PL"},"logo":{"@id":"https://hosteam.pl/#logo"}},{"@id":"https://hosteam.pl/en/blog/spf-dkim-dmarc-krok-po-kroku#article","@type":"Article","dateModified":"2026-09-23T11:08:57Z","datePublished":"2026-08-26T19:45:32Z","description":"Three DNS records decide whether Gmail and Outlook trust your domain. Here is what each one does and how to set them correctly.","headline":"SPF, DKIM and DMARC step by step – keeping your mail out of the spam folder","inLanguage":"en","thumbnailUrl":"https://hosteam.pl/img/og-default.jpg","author":{"@id":"https://hosteam.pl/#identity"},"image":{"@id":"https://hosteam.pl/#/schema/image/1"},"isPartOf":{"@id":"https://hosteam.pl/en/blog/spf-dkim-dmarc-krok-po-kroku#webpage"},"keywords":["dns","hosting","poczta"],"mainEntityOfPage":{"@id":"https://hosteam.pl/en/blog/spf-dkim-dmarc-krok-po-kroku#webpage"},"publisher":{"@id":"https://hosteam.pl/#identity"}},{"@id":"https://hosteam.pl/#logo","@type":"ImageObject","caption":"HosTeam","contentUrl":"https://hosteam.pl/img/hosteam-logo.png","inLanguage":"pl","url":"https://hosteam.pl/img/hosteam-logo.png"},{"@id":"https://hosteam.pl/#/schema/image/1","@type":"ImageObject","contentUrl":"https://hosteam.pl/img/og-default.jpg","inLanguage":"pl","url":"https://hosteam.pl/img/og-default.jpg"}]} ``` ## Sitemap See the full [sitemap](https://hosteam.pl/sitemap.md) for all pages.