How to Set Up SPF, DKIM, and DMARC for Your New Business Email

Updated 2026-07-01 · Hosting Reviews

Sending a professional email is easy, but making sure it actually reaches your customer's inbox is a different story. If you haven't configured your DNS records, your messages are likely being flagged as spam. To fix this, you need to setup SPF, DKIM, and DMARC for your business email.

Think of these three records as a digital passport. They prove to receiving servers (like Gmail or Outlook) that you are who you say you are and that your email hasn't been tampered with. If you're just starting out, the easiest way to manage this is by using a reliable provider like Hostinger, which combines domain registration and business email in one dashboard.

The Foundation: Domain & Business Email

Before you can touch DNS records, you need a professional domain (e.g., @yourbusiness.com). Avoid using @gmail.com or @yahoo.com for business; it lacks credibility and gives you zero control over your deliverability.

For beginners, I recommend a "Domain & Business Email" bundle. This keeps your DNS management in one place. When choosing hosting, most small businesses will find Shared Hosting ($3–$15/month) sufficient. If you expect heavy traffic or run a complex store, Cloud Hosting is a better bet for stability. Hostinger is a great choice here because they offer fast servers, a free SSL certificate, and one-click WordPress installation, which saves you hours of manual configuration.

What is SPF? (Sender Policy Framework)

SPF is a text record in your DNS that lists exactly which mail servers are allowed to send email on behalf of your domain. If an email arrives from a server not on that list, the recipient's server may reject it.

To set it up, you'll find an SPF value in your email provider's settings. It usually looks like v=spf1 include:_spf.google.com ~all. You simply copy this value and add it as a TXT record in your DNS manager. If you use Hostinger for both your domain and email, much of this is often automated during the initial setup.

How to Setup DKIM for Business Email

While SPF says "this server is allowed to send," DKIM (DomainKeys Identified Mail) adds a digital signature to every email you send. This proves the content of the email wasn't changed in transit.

Setting up DKIM involves two steps: first, your email provider generates a public key. Second, you create a TXT record in your DNS settings with a specific "selector" (a name like google._domainkey) and the key value. Once saved, the receiving server uses that key to verify the signature on your email.

Implementing DMARC for Maximum Security

DMARC (Domain-based Message Authentication, Reporting, and Conformance) is the final layer. It tells the receiving server what to do if an email fails SPF or DKIM checks. Do you want the email to be delivered anyway, sent to spam, or rejected entirely?

A basic DMARC record looks like this: v=DMARC1; p=none;. The p=none part is a "monitoring mode" that tells servers to deliver the mail regardless of failure but send you a report. Once you're sure your SPF and DKIM are working perfectly, you can change the policy to p=quarantine (spam folder) or p=reject (blocked completely).

Quick Step-by-Step Guide to Get Online

If you're starting from scratch, follow this workflow to save time and money:

• Register your domain: Choose a short, memorable .com or .net.
• Get Hosting: Sign up for a plan (Hostinger is highly recommended for its balance of speed and price).
• Create Business Email: Set up your professional address (e.g., hello@yourbusiness.com).
• Configure DNS: Add your SPF and DKIM TXT records provided by your email host.
• Add DMARC: Start with a p=none policy to ensure everything is flowing correctly.
• Test: Use a tool like Mail-Tester.com to verify your records are active.

FAQ

Do I really need all three records?

Yes. SPF and DKIM are the authentication mechanisms, but DMARC is the instruction manual that tells the world how to handle those mechanisms. Without DMARC, many major providers may still flag your mail as suspicious.

How long does it take for these changes to work?

DNS changes are subject to "propagation." While some updates happen instantly, it can take anywhere from a few minutes to 48 hours for the rest of the internet to see your new SPF or DKIM records.

Does my hosting plan affect my email deliverability?

Indirectly, yes. Low-quality, cheap hosting providers often have "dirty" IP addresses shared with spammers. Using a reputable provider like Hostinger ensures you're starting on a clean network with better overall reputation.