In attempt to further secure our incoming email, we have setup a rule to notify senders if their domain has not been configured with at least a basic SPF record.

Not having a SPF record in place can lead to your emails being quarantined or marked as junk to many of your recipients.

There are three types of email authentication.

1. SPF
2. DKIM
3. DMARC

I would recommend setting up all three, but a minimum of an SPF record.

Please see links below to explain how to setup email authentication for your domain name.

Overview – Read this first

How to Authenticate Your Email in 5 Steps (Email Authentication 101) | Twilio SendGrid

Most companies use Google or Microsoft 365 as your email provider.

Below is information specific to each platform.

Google:

Help prevent spoofing, phishing, and spam - Google Workspace Admin Help

1. Help prevent spoofing and spam with SPF - Google Workspace Admin Help
2. Increase security for outgoing email with DKIM - Google Workspace Admin Help
3. Increase security for forged spam with DMARC - Google Workspace Admin Help

Video - Configure SPF, DKIM, and DMARC for Your Domain

Microsoft 365:

1. Set up SPF identify valid email sources for your Microsoft 365 domain - Microsoft Defender for Office 365 | Microsoft Learn
2. How to use DKIM for email in your custom domain - Microsoft Defender for Office 365 | Microsoft Learn
3. Use DMARC to validate email, setup steps - Microsoft Defender for Office 365 | Microsoft Learn

Video – Microsoft 365 SPF, DKIM, DMARC