How to Set Up SPF, DKIM, and DMARC on NameSilo
Prerequisites:
- Ensure you are using NameSilo's default nameservers:
- ns1.dnsowl.com
- ns2.dnsowl.com
- ns3.dnsowl.com Or premium equivalents:
- premium-ns1.dnsowl.com
- premium-ns2.dnsowl.com
- premium-ns3.dnsowl.com
- If you’re using third-party nameservers, the records must be added at your DNS provider instead.
- Use the DNS editor from your NameSilo account dashboard.
Set Up SPF (Sender Policy Framework)
What is SPF?
SPF prevents your emails from being marked as spam by verifying that mail servers sending on behalf of your domain are authorized.
Example SPF Records:
- Google Workspace only: v=spf1 include:_spf.google.com ~all
- Google Workspace + Mailchimp: v=spf1 include:_spf.google.com include:servers.mcsv.net ~all
- Google Workspace + Microsoft Office 365: v=spf1 include:_spf.google.com include:spf.protection.outlook.com ~all
How to Add on NameSilo:
- Type: TXT
- Host: @
- Value: Your chosen SPF string (e.g., v=spf1 include:_spf.google.com ~all)
- Save and allow 48 hours for propagation.
Set Up DKIM (DomainKeys Identified Mail)
What is DKIM?
DKIM adds a digital signature to your emails, verifying that the message wasn't altered and is truly from your domain.
Steps:
- Generate DKIM Key Pair:
- In Google Workspace, go to: Admin Console > Apps > Google Workspace > Gmail > Authenticate Email
- Click Generate New Record.
- Choose 2048-bit key if supported.
- Use default selector: google
__MEDIA_BLOCK__::https://www.youtube.com/watch?v=Toz75gMmwTg
- Add the TXT Record to NameSilo:
- Type: TXT
- Host: google._domainkey
- Value: DKIM TXT value (starts with v=DKIM1; k=rsa; ...)
- Save and allow 48 hours to take effect.
- Enable DKIM:
- Back in the Admin Console, return to the Authenticate Email section.
- Click Start Authentication once your DNS is updated.
Set Up DMARC (Domain-based Message Authentication, Reporting & Conformance)
What is DMARC?
DMARC tells mail servers how to handle messages that fail SPF or DKIM checks and sends reports to help identify spoofing.
Example DMARC Record:
v=DMARC1; p=reject; rua=mailto:postmaster@example.com, mailto:dmarc@example.com; pct=100; adkim=s; aspf=s
- p= options: none, quarantine, reject
- rua=: Reporting email address
- pct=: Percentage of mail the policy applies to (start with 10–50%)
How to Add on NameSilo:
- Type: TXT
- Host: _dmarc
- Value: Your DMARC string (see example above)
- Save and allow 48 hours for propagation.
Best Practices:
- Start with: p=none to monitor before enforcing
- Gradually move to: p=quarantine or p=reject
- Create a separate email to handle DMARC reports due to high volume
- Keep SPF records updated if you add/remove senders
Are You Using Titan Mail Instead? Check out our Titan Mail Support Guide here
Additional Workspace Resources:
