SPF, DKIM, and DMARC setup for cold email
The three DNS records that decide whether your cold email is trusted. Since Google and Yahoo tightened their rules, missing or broken authentication is the fastest way to the spam folder. Generate valid records below, then follow the exact steps for your DNS host.
SPF
Sender Policy Framework
A TXT record at your root domain that lists every service allowed to send mail as you. Receiving servers check the sending IP against it.
If a sending source is missing from SPF, that mail can be marked unauthenticated and land in spam.
DKIM
DomainKeys Identified Mail
A cryptographic signature added to every message. The matching public key is published in DNS, so receivers can verify the message really came from your domain and was not altered.
DKIM is generated by your email host (Google Workspace, Microsoft 365, your ESP), then published in DNS. Without it, DMARC has only SPF to rely on.
DMARC
Domain-based Message Authentication, Reporting and Conformance
A policy at _dmarc.yourdomain that tells receivers what to do when a message fails SPF and DKIM alignment, and where to send reports.
Without DMARC, Gmail and Yahoo now send bulk mail to spam or reject it outright. A record is required for serious sending.
SPF and DMARC record generator
Pick what sends mail for your domain and we build a valid, single SPF record plus a safe starter DMARC record. Add them as TXT records at your DNS host (steps per host below). DKIM is generated by your email host, so it is not built here.
v=spf1 include:_spf.google.com ~all
DMARC policy
v=DMARC1; p=none; adkim=r; aspf=r;
Step-by-step DNS instructions by host
Where to add the records and the exact click-path for each registrar, DNS host, and email host.
DNS hosts and registrars
- GoDaddyAdd SPF, DKIM, and DMARC records
- CloudflareAdd SPF, DKIM, and DMARC records
- NamecheapAdd SPF, DKIM, and DMARC records
- Squarespace Domains (formerly Google Domains)Add SPF, DKIM, and DMARC records
- AWS Route 53Add SPF, DKIM, and DMARC records
- BluehostAdd SPF, DKIM, and DMARC records
- HostingerAdd SPF, DKIM, and DMARC records
- IONOSAdd SPF, DKIM, and DMARC records
- Name.comAdd SPF, DKIM, and DMARC records
- PorkbunAdd SPF, DKIM, and DMARC records
- DreamHostAdd SPF, DKIM, and DMARC records
- WixAdd SPF, DKIM, and DMARC records
Email hosts (generate DKIM here)
Authentication gets you trusted. Warmup gets you delivered.
SPF, DKIM, and DMARC prove you are who you say you are, but a brand-new domain with perfect records still lands in spam without reputation. Scheduler Zero warms your domains and manages sending so your cold email actually reaches the inbox.