Skip to main content
OpenMail handles SPF and DKIM for your sending domain. Add a domain in the Dashboard or via the API and publish the DNS records we return. The domain verifies automatically once they are live.

​
SPF

SPF (Sender Policy Framework) authorizes our servers to send on behalf of your domain. Add the TXT record we provide on the bounce host (your custom MAIL FROM subdomain).

​
DKIM

DKIM (DomainKeys Identified Mail) signs outgoing messages. Publish the three CNAME records we provide under _domainkey (hosts like omail._domainkey).

​
DMARC

DMARC (Domain-based Message Authentication) tells receivers what to do with messages that fail SPF/DKIM. The DNS panel includes a default record — v=DMARC1; p=none; at _dmarc — which satisfies Google and Yahoo’s bulk sender requirements and has no effect on delivery. DMARC is your own published policy, so it is not part of domain verification: a domain verifies without it. Once SPF and DKIM are aligned and you have reviewed your reports, tighten the policy to p=quarantine or p=reject. If your domain already publishes a _dmarc record, keep it rather than replacing it.