How to check your Domain Security?
Setting up your DNS records is an important step in securing your domain, and avoiding spam. It’s a fairly technical task, however Mailsplit enables you to set it up with just a copy paste.
If you want to learn more about the importance of setting up your DNS records, you can check our Domain ID Card article.
In this tutorial, you’ll learn how to check your domain security, and how to set it up. Basically, there are 3 main DNS records that are needed for your email setup: SPF, DMARC, and DKIM.
If you want to check your records, you’ll need to navigate to your Domains tab, click on your domain, then click on Check button.
[Screenshot of the Domains tab, with arrows pointing to Domains, and the Domain]
[Screenshot of the Domain page highlighting the check button]
Once you click on the button, Mailsplit checks your DNS records, then compares your records with your email setup inside Mailsplit.
Remark: Mailsplit can’t detect email providers outside the app. If you’re using an email provider outside Mailsplit, you should add it to your DNS record.
If the setup is correct, the status will be Verified. In this case, you don’t need to do anything. You can skip to the DKIM part below, which is different.
If your Status is Incomplete, you’ll need to change your domain records to have a proper setup. The following will help you with that. Don’t worry, it all boils down to a simple copy paste.
If your SPF status is incomplete and you want to fix it, you need to first click on your SPF Tab. The pop up window will have a value under the field Value, click on the Copy Button to copy it.
[Screenshot of the click path and the highlighted value that should be copied, and highlight the current value]
You’ll need to simply paste the value you copied.
For this step, you’ll need to see whether you have an SPF record already, or not, since SPF should be only ONE record in your DNS.
If you find a value in your “Current Value” field (see example in the screenshot below), it means that you have an SPF record. Look for it, and update it with the copied value.
[Screenshot of the SPF card with a highlighted non empty current value]
If your “Current Value” field is empty, you can add the SPF record to your DNS. Here are the information you need to enter:
Record Type: TXT Record
Host: @
Value: paste the value you copied from Mailsplit here
TTL: you can pick the minimum value (5 minutes for instance)
If you need help finding your DNS records, we have put together a list of tutorials for popular domain providers:
Namecheap
Godaddy….
If you don’t find your own, you can google : Add TXT record in <providerName>.
You can do the same for DMARC. Here are the steps:
Similarly, if your DMARC status is incomplete and you want to fix it, you need to first click on your DMARC Card. The pop up window will have a value under the field “Enter this Value”, click on the Copy Button to copy it.
[Screenshot of the click path and the highlighted value that should be copied, and highlight the current value]
You’ll need to simply paste the value you copied.
If you find a value in your “Current Value” field (see example in the screenshot below), it means that you have a DMARC record. Look for it, and update it with the copied value.
[Screenshot of the DMARC card with a highlighted non empty current value]
If your “Current Value” field is empty, you can add the DMARC record to your DNS. Here are the information you need to enter:
Record Type: TXT Record
Host: _dmarc
Value: paste the value you copied from Mailsplit here
TTL: you can pick the minimum value (5 minutes for instance)
If you need help finding your DNS records, we have put together a list of tutorials for popular domain providers:
Namecheap
Godaddy….
If you don’t find your own, you can google : Add TXT record in <providerName>.
For DKIM, the process is a bit different.
Mailsplit checks if you have a published DKIM record. If you don’t have one, it marks the DKIM status as Incomplete.
It's recommended to add a DKIM record for each email provider you're using
If your DKIM status is “Incomplete”, you should add one to your DNS. Each email provider has a tutorial that helps you set up your DKIM. Here are the links to the tutorials of some popular providers:
Gmail
Office365
Amazon
Mailgun
Please follow the steps in your providers’ tutorial to set up your DKIM.
If your provider isn’t in the list, you can google: set up dkim <providerName>
Adding a BIMI record is the icing on the cake. It’s an acronym for Brand Indicator Message Identification. As its name suggests, BIMI is a way of establishing your branding through emails. It basically enables you to add your company’s logo to your emails. The catch here is that BIMI can’t work unless your DMARC record is well set up.
Usually, when you want to set up your BIMI, you need to upload your logo file to a public server. But, with Mailsplit, you don’t need to go through these technical details.
You can click on the picture, and upload your SVG logo file from there.
[Screenshots of the upload process]
Similarly to previous records, you can copy the value highlighted in the next screenshot:
[Screenshot of the BIMI page with the Value highlighted]
Then, similarly to the other records, you can add the BIMI record in your DNS. Here are the information you need to enter:
Record Type: TXT Record
Host: default._bimi
Value: paste the value you copied from Mailsplit here
TTL: you can pick the minimum value (5 minutes for instance)
When you’re done with all this, your domain will be secured, and your deliverability will improve. There are other Mailsplit features that help you with your email deliverability. You can check them in this article.
If you want to learn more about the importance of setting up your DNS records, you can check our Domain ID Card article.
In this tutorial, you’ll learn how to check your domain security, and how to set it up. Basically, there are 3 main DNS records that are needed for your email setup: SPF, DMARC, and DKIM.
Checking your SPF and DMARC:
If you want to check your records, you’ll need to navigate to your Domains tab, click on your domain, then click on Check button.
[Screenshot of the Domains tab, with arrows pointing to Domains, and the Domain]
[Screenshot of the Domain page highlighting the check button]
Once you click on the button, Mailsplit checks your DNS records, then compares your records with your email setup inside Mailsplit.
Remark: Mailsplit can’t detect email providers outside the app. If you’re using an email provider outside Mailsplit, you should add it to your DNS record.
If the setup is correct, the status will be Verified. In this case, you don’t need to do anything. You can skip to the DKIM part below, which is different.
If your Status is Incomplete, you’ll need to change your domain records to have a proper setup. The following will help you with that. Don’t worry, it all boils down to a simple copy paste.
SPF: If your SPF status is incomplete, what to do?
Step 1: Copy the value
If your SPF status is incomplete and you want to fix it, you need to first click on your SPF Tab. The pop up window will have a value under the field Value, click on the Copy Button to copy it.
[Screenshot of the click path and the highlighted value that should be copied, and highlight the current value]
Step Two: Paste the Value in your DNS
You’ll need to simply paste the value you copied.
For this step, you’ll need to see whether you have an SPF record already, or not, since SPF should be only ONE record in your DNS.
If you find a value in your “Current Value” field (see example in the screenshot below), it means that you have an SPF record. Look for it, and update it with the copied value.
[Screenshot of the SPF card with a highlighted non empty current value]
If your “Current Value” field is empty, you can add the SPF record to your DNS. Here are the information you need to enter:
Record Type: TXT Record
Host: @
Value: paste the value you copied from Mailsplit here
TTL: you can pick the minimum value (5 minutes for instance)
If you need help finding your DNS records, we have put together a list of tutorials for popular domain providers:
Namecheap
Godaddy….
If you don’t find your own, you can google : Add TXT record in <providerName>.
You can do the same for DMARC. Here are the steps:
DMARC: If your DMARC status is incomplete, what to do?
Step 1: Copy the value
Similarly, if your DMARC status is incomplete and you want to fix it, you need to first click on your DMARC Card. The pop up window will have a value under the field “Enter this Value”, click on the Copy Button to copy it.
[Screenshot of the click path and the highlighted value that should be copied, and highlight the current value]
Step 2: Paste the Value in your DNS
You’ll need to simply paste the value you copied.
If you find a value in your “Current Value” field (see example in the screenshot below), it means that you have a DMARC record. Look for it, and update it with the copied value.
[Screenshot of the DMARC card with a highlighted non empty current value]
If your “Current Value” field is empty, you can add the DMARC record to your DNS. Here are the information you need to enter:
Record Type: TXT Record
Host: _dmarc
Value: paste the value you copied from Mailsplit here
TTL: you can pick the minimum value (5 minutes for instance)
If you need help finding your DNS records, we have put together a list of tutorials for popular domain providers:
Namecheap
Godaddy….
If you don’t find your own, you can google : Add TXT record in <providerName>.
DKIM:
For DKIM, the process is a bit different.
Mailsplit checks if you have a published DKIM record. If you don’t have one, it marks the DKIM status as Incomplete.
It's recommended to add a DKIM record for each email provider you're using
If your DKIM status is “Incomplete”, you should add one to your DNS. Each email provider has a tutorial that helps you set up your DKIM. Here are the links to the tutorials of some popular providers:
Gmail
Office365
Amazon
Mailgun
Please follow the steps in your providers’ tutorial to set up your DKIM.
If your provider isn’t in the list, you can google: set up dkim <providerName>
BIMI:
Adding a BIMI record is the icing on the cake. It’s an acronym for Brand Indicator Message Identification. As its name suggests, BIMI is a way of establishing your branding through emails. It basically enables you to add your company’s logo to your emails. The catch here is that BIMI can’t work unless your DMARC record is well set up.
Usually, when you want to set up your BIMI, you need to upload your logo file to a public server. But, with Mailsplit, you don’t need to go through these technical details.
Step 1: Upload your logo in SVG format
You can click on the picture, and upload your SVG logo file from there.
[Screenshots of the upload process]
Step 2: Copy and paste the BIMI value into your DNS record
Similarly to previous records, you can copy the value highlighted in the next screenshot:
[Screenshot of the BIMI page with the Value highlighted]
Then, similarly to the other records, you can add the BIMI record in your DNS. Here are the information you need to enter:
Record Type: TXT Record
Host: default._bimi
Value: paste the value you copied from Mailsplit here
TTL: you can pick the minimum value (5 minutes for instance)
When you’re done with all this, your domain will be secured, and your deliverability will improve. There are other Mailsplit features that help you with your email deliverability. You can check them in this article.
Updated on: 16/11/2023
Thank you!