5 min read
SPF, DKIM and DMARC explained: how inboxes trust mail
What SPF, DKIM and DMARC each check, why alignment decides whether DMARC passes, and a safe order for moving a domain from p=none to p=reject.
BenjaminDeliverabilityEmail authentication
SPF, DKIM and DMARC in depth: how receivers decide a message really comes from you, and how to set up each one.
BenjaminDeliverability10 min read
What is BIMI? Inbox logos and how to get a certificate
BIMI is a DNS record that puts your logo beside mail that passes DMARC. How the record, the BIMI logo and VMC or CMC certificates work, inbox by inbox.
ArtaDeliverability9 min read
What is DKIM? How DKIM signatures and records work
DKIM is a signature on every email that proves which domain vouches for it and that nothing changed on the way. How it works, tag by tag, and which keys to use.
BenjaminDeliverability9 min read
What is DMARC? Policy, reports and getting to p=reject
DMARC is a DNS record that checks SPF and DKIM against your visible From domain, tells inboxes what to do with mail that fails and reports who sends as you.
ArtaDeliverability9 min read
What is SPF? How SPF records work and where they break
SPF is the DNS record that lists the servers allowed to send mail for your domain. How receivers check it, what each part means and what quietly breaks it.
ArtaDeliverabilityTry it yourself
Your email,
on your own domain.
Nextmail puts your domains, sending and inbox in one place, with the full API on every plan, the free one included.
Google Workspace