Authentication and infrastructure – Validity Help Center

Troubleshooting SPF failures (with Kitterman's SPF Query tool)

One of the best tools for troubleshooting Sender Policy Framework (SPF) issues is available from ...

Troubleshooting Sender Policy Framework (SPF) failures

This article was replaced by: Troubleshooting SPF failures (with Kitterman's SPF Query tool)

Common SPF record syntax errors

You must follow the syntax outlined in the SPF specification for your SPF record to work properly...

Do all domains need a Sender Policy Framework (SPF) record?

All domains, regardless if they send email, should include a Sender Policy Framework (SPF) record...

Should Sender Policy Framework (SPF) be added as a TXT type record or an SPF type record?

A Sender Policy Framework (SPF) record should be added as a TXT type record to your Domain Name S...

What should I know about the SPF record string character limit?

Sender Policy Framework (SPF) records have a 255 character string limit in Domain Name System (DN...

What is the difference between SenderID and SPF?

Sender Policy Framework (SPF) and SenderID are almost identical; however, they look at the domain...

Including IP addresses in your SPF record

An SPF record is your way of telling mailbox providers which IP addresses or domains are authoriz...

Are SenderID records still being validated?

No. Microsoft no longer validates SenderID records, so there is no need to add SenderID records t...

DKIM signing and verification overview

Domain Keys Identified Mail (DKIM) is one of the authentication methods used by mailbox providers...

DKIM DNS record overview

Your DKIM record is usually configured within DNS for your domain by your company’s IT profession...

How to set up DKIM

Domain Keys Identified Mail (DKIM) is one of the authentication methods used by mailbox providers...

How many bits should DomainKeys Identified Mail (DKIM) keys be?

DomainKeys Identified Mail (DKIM) keys should be a minimum of 1024 bits. In January 2013, Gmail s...

DKIM signature header detail

The DKIM signature header field is a special header placed into each email message containing inf...

Troubleshooting DKIM

The success of DomainKeys Identified Mail (DKIM) authentication verification depends on both the ...

How to generate DKIM keys

You can use DKIM wizards to generate your DKIM public and private key pair. There are a lot of DK...

How are DomainKeys Identified Mail (DKIM) and DomainKeys different?

DomainKeys Identified Mail (DKIM) and DomainKeys differ in several ways: DKIM offers multiple si...

What is Domain-based Message Authentication Reporting and Conformance (DMARC)?

Domain-based Message Authentication, Reporting and Conformance (DMARC) is a technical specificati...

How to set up a DMARC record

We suggest you set up a Domain-based Message Authentication Reporting and Conformance (DMARC) rec...

How can I lookup my DMARC record?

Either of the DMARC lookup tools below are helpful if you are unsure if you currently have a DMAR...

Can I implement DMARC even though I do not sign messages with DKIM?

Yes, you can rely solely on Sender Policy Framework (SPF) while implementing Domain-based Message...

Is a Domain-based Message Authentication, Reporting, and Conformance (DMARC) record on a parent domain inherited by its sub-domains?

Yes, the default behavior for a domain's Domain-based Message Authentication, Reporting, and Conf...

How to ensure your DMARC record is not inherited by a domain's sub-domains

There are two different tactics to take if you do not want the same policy level on a parent doma...

Can I have multiple reporting addresses in my DMARC record?

Yes, you can have multiple reporting addresses in your DMARC record. According to the DMARC speci...

What is DomainKeys Identified Mail (DKIM) alignment for DMARC?

Domain alignment is important for Domain-based Message Authentication, Reporting & Conformance (D...

What is Sender Policy Framework (SPF) alignment for DMARC?

Domain alignment is important for Domain-based Message Authentication, Reporting & Conformance (D...

How often do mailbox providers send DMARC reports?

Domain-based Message Authentication, Reporting, and Conformance (DMARC) aggregate reports are us...

What are the different tags of a DMARC record?

There are many tags you can include in your Domain-based Message Authentication Reporting and Con...

What is a dynamic IP address and why should you avoid using one for sending marketing and transactional email?

A dynamic IP address is assigned to a device on a network, such as a personal computer or phone, ...

How does email forwarding affect authentication results?

The Domain-Based Message Authentication, Reporting, and Conformance (DMARC) authentication standa...