SPF, DKIM, DMARC

Authentication records tell receiving servers your email is actually from you. Required for deliverability in 2026.

SPF

Lists authorized IPs that can send from your domain. TXT record.

DKIM

Cryptographic signature on every email. Proves the message wasn't modified.

DMARC

Policy telling receivers what to do with unauthenticated mail. Also provides reporting.

All three

Gmail and Yahoo require all three for senders of 5000+ emails/day as of 2024. No exceptions.