Why You Need SPF, DKIM, and DMARC for Email Delivery Success

In today's digital world, email remains a crucial communication tool. But with the rise of spam and phishing attacks, ensuring your emails reach their intended recipients is more important than ever. This is where SPF, DKIM, and DMARC come in. These three essential DNS records work together to authenticate your emails, boosting deliverability and protecting your reputation.

Why are these records important?

  • Increased Deliverability: When your emails are properly authenticated, email providers like Gmail and Outlook are more likely to deliver them to the inbox instead of the spam folder. This ensures your important messages reach your audience.
  • Reduced Spam and Phishing: By verifying the sender's identity, these records make it harder for spammers and phishers to impersonate your domain, protecting your customers from malicious attacks.
  • Improved Brand Reputation: Authenticated emails build trust with your recipients, as they know the emails are genuinely from you. This strengthens your brand image and fosters better communication.

Understanding the Records:

1. SPF (Sender Policy Framework):

This record specifies which servers are authorized to send emails on your behalf. This helps prevent unauthorized emails from being sent from your domain.

2. DKIM (DomainKeys Identified Mail):

This record adds a digital signature to your emails, verifying their authenticity and preventing tampering during transit.

3. DMARC (Domain-based Message Authentication, Reporting & Conformance):

This record tells email providers what to do with emails that fail SPF or DKIM checks. It also provides reporting so you can monitor email authentication and identify potential issues.

The Records You Need:

The records provided below should be tailored to your domain and Nexus service setup. Here's a breakdown:


  • Name: `_dmarc.DOMAIN.com.au`
  • Type: TXT
  • Value: `v=DMARC1; p=reject`

This record tells email providers to reject emails that fail SPF or DKIM checks, offering the highest level of protection.


  • Name: (Leave blank)
  • Type: TXT
  • Value: `v=spf1 a mx include:smtp3.nexusdigital.net.au -all`

This record authorizes Nexus servers and your domain's mail servers to send emails.


  • Name: `nm3._domainkey.DOMAIN.com.au`
  • Type: CNAME
  • Value: `nm3._domainkey.nsmcloud.com.au`

This record links your domain to Nexus's DKIM signing service, adding the digital signature to your emails.

Don't wait, implement now!

Adding these records is a simple and crucial step to ensure your email communication is secure and effective. By working with Nexus support, you can easily implement these records and enjoy the benefits of improved deliverability, enhanced security, and a stronger brand reputation.

Updated: 20 February 2024

Support telephone: 02 9521 4052

Nexus Service Manager is developed by Nexus Digital Technology PTY LTD.