Security records

There are several DNS mechanisms to prevent others from sending emails on behalf of your domain. These all work as TXT records that need to be added on your domain:

• Sender Policy Framework (SPF) ↗: List authorized IP addresses and domains that can send email on behalf of your domain.
• DomainKeys Identified Mail (DKIM) ↗: Ensure email authenticity by cryptographically signing emails.
• Domain-based Message Authentication Reporting and Conformance (DMARC) ↗: Receive aggregate reports about your email traffic and provide clear instructions for how email receivers should treat non-conforming emails.

Note

For additional background on email security records, refer to the introductory blog post ↗.

Create security records

To set up email security records:

1. Log in to the Cloudflare dashboard ↗, and select your account and domain.
2. Go to Email > DMARC Management.
3. In Email record overview, select View records.
4. Use the available options to set up SPF, DKIM, and DMARC records. This page will also list any previous records you might already have in your account.

Edit or delete records

Refer to Manage DNS records for more information.