Business Email Setup: Domain Email, SPF, DKIM and DMARC
How to set up professional business email on your domain, configure SPF, DKIM and DMARC, fix website form emails and stay secure.
On this page
A professional business email address on your own domain, such as name@yourbusiness.com, builds trust and keeps communication under your control. Setting it up properly also means configuring email authentication (SPF, DKIM and DMARC) so your messages reach inboxes rather than spam folders. Since 2024, Gmail and Yahoo have required stronger authentication from bulk senders, and good authentication helps all businesses with deliverability.
Why use domain email
- Credibility: customers trust name@business.com more than a free address.
- Control: you own the accounts and can manage access when staff change.
- Consistency: email matches your website and brand.
- Security and compliance: business email services offer administration, security settings and data controls.
Choosing an email provider
The most common options for small and mid-sized businesses are:
- Google Workspace: Gmail interface, Google Drive, Calendar and Meet.
- Microsoft 365: Outlook, Teams, OneDrive and Office apps.
- Other providers: Zoho Mail, Fastmail and similar services, often lower cost.
Email included with web hosting is often cheaper but may have weaker deliverability, security and support. Keeping email separate from website hosting also means a website problem does not take email down with it. See our guide to WordPress hosting.
Setting up DNS records
Your email provider will give you DNS records to add at your DNS provider. See our guide to domain and DNS basics.
MX records direct incoming email to your provider.
SPF (Sender Policy Framework): a TXT record listing which services are allowed to send email for your domain, such as your email provider, your newsletter platform and your website. You should have only one SPF record, combining all senders.
DKIM (DomainKeys Identified Mail): adds a digital signature to outgoing email, verified with a public key in your DNS. Each sending service usually provides its own DKIM record.
DMARC (Domain-based Message Authentication, Reporting and Conformance): a TXT record telling receiving servers what to do with email that fails SPF or DKIM checks, and where to send reports. Start with a monitoring policy (p=none), review reports, then move to quarantine or reject once legitimate senders are authenticated.
Account for every service that sends email
Businesses often send email from several systems: the main mailbox, a newsletter platform, a CRM, a booking tool, an invoicing system and the website’s contact forms. Each needs to be authenticated for your domain. Unauthenticated senders are a common reason for emails landing in spam.
Website form emails
WordPress and other CMSs often send form notifications using the server’s default mail function, which may not be authenticated and can fail silently. Configuring the site to send through an authenticated SMTP service, such as your email provider or a transactional email service, improves reliability. See our guide to website form spam for related form issues.
Security basics
- Enable two-factor authentication for all accounts.
- Use shared mailboxes or aliases (such as info@ or sales@) instead of sharing passwords.
- Remove accounts promptly when staff leave.
- Train staff to recognise phishing.
- Back up important email if your provider’s retention is limited.
Testing your setup
Free tools can check whether SPF, DKIM and DMARC are configured correctly. Send test emails to Gmail and Outlook accounts and check message headers for “pass” results. Monitor DMARC reports, or use a DMARC reporting service, to see which systems send email on your behalf.
Migrating email
Moving email providers involves changing MX records and migrating existing mail. Plan carefully to avoid lost messages, and avoid making MX changes during unrelated website moves unless email is part of the project.
Email that arrives and builds trust
Professional email on your own domain, with proper authentication, protects your reputation and makes sure customers actually receive your messages.
If emails from your website or business are landing in spam, our website design and development service can review your DNS and email authentication and fix delivery issues.