How do I set up DKIM, SPF and DMARC for email security?

    What is DKIM and Why is it Needed?

    DKIM (DomainKeys Identified Mail) allows emails to be digitally signed to confirm the authenticity of the sender.

    During verification, the DKIM signature in the email header is compared with the DKIM key stored in the domain's DNS settings.

    If the signature is valid, the email is considered trustworthy.

    How to Set Up a DKIM Record?

    Adding a DKIM Record in the INWX Customer Area

    1. Log in to the INWX customer area.

    2. Navigate to "Nameserver" and click the Edit button for the respective domain.

    3. Click on "Add DNS Record".

    4. Enter the DKIM selector in the "Name" field (see below).

      • Example for our hosting: prod0.webspacebz._domainkey

    5. Select "TXT" as the record type.

    6. Enter the following DKIM key in the "Value" field:

      v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vRezTQz50A0afbcwxW0j+NnEIYi2lLAuZh9hFEbRfPnOyONqc9qh7qW9E/F2mTAeTwnil0mfGTGcZMnSWjCg7ljo6AXpHXWv/BqACxKmIe0fuYuP3uS3Q3CmLV0xAFvBlOxXhbIIG0nxkaYMSTSo9MuH94O75zLC6dWFRoHegJVcKEA1GwG6zJKkKzNjGxwllLU7bh/nI6hMHkiksMFCz3GaNbmZk6KVfbyupkajtpPcsWMRDLxmzsAR6S2qAJJKz6x5f5rDvLX4jcNsBdKCsm/N9Wdq7nMtJZ+8I1/+8P2fcljzffg6Z5Tr4abgWlDjWh7cUzZxqFZyDYofUEDSwIDAQAB
     7. Click on "Save".

    The record will be active immediately and globally available within 24-48 hours.

    Setting Up an SPF Record for Our Hosting

    SPF (Sender Policy Framework) specifies which mail servers are allowed to send emails on behalf of a domain.

    Adding an SPF Record in the INWX Customer Area

    1. Log in to the INWX customer area.

    2. Navigate to "Nameserver" and select your domain.

    3. Click on "Add DNS Record".

    4. Enter @ in the "Name" field (or leave it blank).

    5. Select "TXT" as the record type.

    6. Enter the following SPF record in the "Value" field:
      v=spf1 a mx include:_spf.webspace.bz ~all

    7. Click on "Save".

    Setting Up a DMARC Record for Additional Protection

    DMARC (Domain-based Message Authentication, Reporting & Conformance) defines policies for SPF and DKIM and provides reports on unauthorized email activity.

    Adding a DMARC Record in the INWX Customer Area

    1. Log in to the INWX customer area.

    2. Navigate to "Nameserver" and select your domain.

    3. Click on "Add DNS Record".

    4. Enter _dmarc in the "Name" field.

    5. Select "TXT" as the record type.

    6. Enter the following DMARC record in the "Value" field:
      v=DMARC1; p=none;

    7. Click on "Save".

    This record specifies that no strict policies are enforced, but reports can be generated. If you want stricter settings, you can adjust the p= policy accordingly.

    Published