Which systems may send?
Record the authorized sending paths.
email security
Review SPF, DKIM and DMARC for your sending services.
Help receiving systems recognize legitimate mail from your domain. Pair sender authentication with careful mailbox access and a plan for unexpected messages.
Your domain’s sending identityIs this message signed?
Verify the signature using the domain’s key.
Does the identity align?
Review policy and authentication reports.
Web Hosting · PLANS & PRICING
Compare all 3 plans ↗Your website and mailboxes, together.
Explore hosting packages that include email. Authentication and account setup remain part of protecting your mailbox.
Web HostingSave 50%
Starter
A simple home for your first website.
$2.50/month
$120.00 upfront for 48 months. Regular total $240.00; save $120.00 (24 months free). Renews at $120.00 every 48 months ($2.50/mo equivalent).
- 1 website
- 60 GB NVMe storage
- Free SSL & business email
- Unlimited free migrations
- AI Website Builder included
RECOMMENDEDSave 50%
Unicorn
More room for every idea you’re building.
$5.00/month
$240.00 upfront for 48 months. Regular total $480.00; save $240.00 (24 months free). Renews at $240.00 every 48 months ($5.00/mo equivalent).
- Unlimited websites*
- Unmetered NVMe storage*
- Daily backups · up to 14 days
- Unlimited free migrations
- AI Website Builder included
Web HostingSave 50%
Business
More performance for your next big chapter.
$7.50/month
$360.00 upfront for 48 months. Regular total $720.00; save $360.00 (24 months free). Renews at $360.00 every 48 months ($7.50/mo equivalent).
- Unlimited websites*
- Unmetered NVMe storage*
- Daily backups · up to 14 days
- Malware scanning & cleanup
- AI Website Builder included
Recurring term savings apply at renewal · USD, before tax. Resources and included features depend on the selected package.
Three different jobs
Understand what each authentication record does.
SPF: authorized sending paths
An SPF policy describes the servers authorized to send for a domain used in the envelope sender. Inventory your senders before changing it.
DKIM: a signed message
DKIM adds a signature that receiving systems can verify using a public key in DNS. Enable it separately for the services that send your mail.
DMARC: alignment and policy
DMARC evaluates aligned SPF or DKIM results and publishes a policy for failures. Reports can help you understand which systems send for your domain.
Make changes with context
Inventory, configure and review before tightening policy.
List every sending service
Include staff mailboxes, website forms, invoices, support tools and marketing platforms. Each legitimate source needs to be accounted for.
Follow each provider’s exact records
Use the records supplied for your account. Avoid guessing SPF mechanisms, DKIM selectors or policy values from another business’s example.
Review reports and real delivery
Monitor authentication and confirm important mail is delivered before tightening a policy. Keep a record of changes and a way to undo a mistaken edit.
These protocols improve sender authentication; they do not guarantee inbox placement or eliminate phishing. Technical background: SPF, DKIM and DMARC.
Protect access to the mailbox, too.
Use a unique password, enable multi-factor authentication where supported and review forwarding rules and active sessions when something looks wrong. Treat unexpected payment changes and requests for credentials as reasons to verify through a known contact method.
Your next good move
Keep your next step
practical.
Where should I start with business email security?
Review who can access each mailbox, how account recovery works and which services send on behalf of your domain. Keep those responsibilities clear before changing settings.
Will this page change my email records?
No. It is a planning resource. Confirm the exact records and instructions with your email provider before editing DNS, and keep a record of the existing configuration.