Learn

Email security guides

Guides to the protocols that protect your business email: what they do, why they matter, and what happens without them.

What is email spoofing?

How attackers send email from your domain without access to your accounts, and how to prevent it.

The checks email providers run on every message, and how to pass them so your emails reach inboxes.

What the 2024 sender rules require from your business email and how to comply with them.

A simple guide to how DMARC works and why it matters for your business email security.

What SPF does, how it protects your domain, and what happens when it's missing.

How DKIM proves your emails are genuine and weren't forged or tampered with.

Step-by-step: create your DKIM keys, add the records in GoDaddy DNS, and switch on signing for Microsoft 365 email.

Create your DKIM keys in Microsoft 365, add the CNAME records to your DNS, and switch on signing.

Why there's no DMARC toggle in Microsoft 365, and how to publish the record and roll it out safely.

The two-step Google Workspace setup people miss: generate the key, publish it, then click Start Authentication.

Publish the v=spf1 include:_spf.google.com ~all record, add your other senders, and stay under the 10-lookup limit.

Publish the _dmarc record, move to enforcement safely, and avoid the Calendar-invite gotcha.

Use Cloudflare's built-in DMARC Management tool or add the record manually, then move to enforcement safely.

How MTA-STS encrypts email in transit and when your business needs it.

How BIMI gets your logo into email inboxes and what you need before setting it up.

Our free scanner checks your SPF, DKIM, DMARC, and more in seconds.