Safeguards

SPF, DKIM and DMARC

What are SPF, DKIM and DMARC?

SPF, DKIM and DMARC are three records in the management of your internet domain. Together they stop outsiders from sending email in your domain's name.

SPF defines which servers are allowed to send for your domain. DKIM adds a signature to every outgoing message so the recipient can verify it is genuine. DMARC ties the two together and tells the receiving mail server what to do with messages that fail. DMARC also delivers reports on attempts to abuse your domain.

Without these three records a faked invoice can be sent in your company's name while your own systems remain completely untouched. The damage lands with your customers and reflects on your name.

Email and domain in the IT Check

Related terms

Phishing Phishing is an attempt to obtain credentials or money through faked messages. The message poses as a known sender and creates tim… CEO fraud and invoice fraud CEO fraud is a scam in which criminals pose as company management and order an urgent transfer. In the related invoice fraud, a g… Malware Malware is software written to damage, spy on or remotely control a system. It covers viruses, trojans, ransomware, spyware and l…

All terms in the knowledge base

Note: This entry reflects the state of knowledge to the best of our understanding and serves as general orientation. It is not legal advice. What counts is always the version currently in force at the responsible body, for example dsb.gv.at, nis.gv.at or enisa.europa.eu.

From the term to practice

Where does your business actually stand?

The IT Check reviews your IT across 8 audit areas with more than 100 individual checks and delivers documented findings with a prioritised action plan. From 1,299 € excl. VAT. The first call takes 20 minutes and carries no charge.

Book a first call