Domain authentication (SPF, DKIM, DMARC) tells receiving mail servers that your emails are legitimate. Without it, your emails are more likely to land in spam. Google and Yahoo require authentication for bulk senders.
MisarMail will show you a TXT record to add to your domain DNS:
Type: TXT
Host: @
Value: v=spf1 include:spf.misarmail.io ~all
If you already have an SPF record, add include:spf.misarmail.io to the existing record rather than creating a second one. Only one SPF record is allowed per domain.
MisarMail generates a unique DKIM key for your domain:
Type: TXT (or CNAME, depending on your DNS provider)
Host: mail._domainkey.yourdomain.com
Value: [generated key — copy from MisarMail settings]
Type: TXT
Host: _dmarc.yourdomain.com
Value: v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com; fo=1
Start with p=none (monitoring mode). After 30 days with no issues, advance to p=quarantine, then p=reject.
After adding the DNS records, return to MisarMail → Sending Domains and click Verify. DNS propagation can take 5–60 minutes. All three records must show a green checkmark before your domain is ready to send.