Reading is great. Tracking makes it stick. Sign up for a free Dashboard to tick off tasks and see your Security Score.
Get my free Dashboard →About 90 minutes to complete
Set up email authentication for your domain (SPF, DKIM, DMARC)
Add SPF, DKIM, and DMARC records to your domain's DNS settings. These prevent attackers from sending emails that appear to come from your business — protecting your clients, suppliers, and reputation.
Why this matters
Without SPF, DKIM, and DMARC records, anyone can send emails that appear to come from your business domain — impersonating you to your clients, suppliers, and staff. This is called email spoofing and is the foundation of many business email compromise attacks. Adding these three DNS records is a permanent, high-impact security improvement that takes an hour or two to complete.
How to do it
- Log in to your domain provider's DNS management panel (the same place you manage your DNS records — for example, Hostinger, GoDaddy, or Cloudflare).
- Create an SPF record: add a TXT record at your root domain with the value `v=spf1 include:[your email provider] ~all` — your email provider's documentation will give you the exact include value to use.
- Create a DKIM record: your email provider (Google Workspace, Microsoft 365, or Zoho) will generate a DKIM key for you — copy the TXT record value they provide and add it at the selector they specify (e.g. google._domainkey).
- Create a DMARC record: add a TXT record at `_dmarc.yourdomain.co.uk` with the value `v=DMARC1; p=none; rua=mailto:you@yourdomain.co.uk` to begin in monitoring mode.
- Verify all three records are working using MXToolbox at mxtoolbox.com — enter your domain and check the SPF, DKIM, and DMARC results.
Need a more detailed walkthrough?
Our step-by-step guide explains each action in full detail, with confirmation steps and related tasks.
View full step-by-step guide →Cyber Essentials framework
This task falls under the Malwarecontrol, one of five areas assessed in the UK's Cyber Essentials scheme. Completing it counts toward your Cyber Essentials alignment. Create a free account to track your progress across all five areas.
Track your security score for free
Create a free Cyber Nova AI account to tick off tasks like this one, see your Security Score, and stay on top of what you've done and what's still to do.
Start your free security check