...

The Holy Trinity of Authentication

SPF, DKIM & DMARC

Why authentication matters

Deliverability starts with proving you’re a legitimate sender. Meet the holiest of trinities of email authentication: SPF, DKIM, and DMARC.

Together, these three form your credibility passport. ISPs like Google & Microsoft require proper authentication. ISPs basically treat unauthenticated emails like toxic waste. Skipping SPF/DKIM/DMARC is deliverability suicide.

Success Story

True story: one company went from 45% to 94% inbox placement in two weeks just by fixing their DMARC policy from ‘none’ to enforcement.

The lesson: handle your authentication, and you won’t lose leads over an easy DNS fix.

SPF Guide

Your domain’s email bouncer

DKIM Guide

Signing your emails like a boss

DMARC Guide

The ultimate email bodyguard

Verify with PitchKraft

PitchKraft lets you verify your SPF, DKIM and DMARC within the software. We strongly advise you to take advantage of that.

We also ask that you verify your domain so that others can’t send emails using PitchKraft on your behalf. Unless you verify your domain, which is a 10-minute job, we won’t be able to let you send emails via PitchKraft.

Our commitment

We value your email reputation and won’t do anything which could harm it. If you have any problems or need any help or advice, just contact our support team anytime.

SPF Guide

Your domain’s email bouncer

DKIM Guide

Signing your emails like a boss

DMARC Guide

The ultimate email bodyguard

The authentication trinity

SPF (Sender Policy Framework)

Essentially a DNS-based guest list saying which servers can send emails on behalf of your domain. If an email comes from an IP not on the list, then the bouncer (the mail server) says ‘nope, not getting in.’

Without SPF: you’re inviting mailbox providers to doubt every email you send.

DKIM (DomainKeys Identified Mail)

This adds a cryptographic signature to your emails. Think of it as a wax seal that works in the digital world. The receiving server checks the signature via your public key in DNS. If the signature is legit, it proves the email hasn’t been tampered with and really comes from you.

No DKIM: no proof you wrote that email at all.

DMARC (Domain-Based Message Authentication, Reporting & Conformance)

The policy enforcer. DMARC ties SPF and DKIM together with your domain’s ‘From’ address and tells receivers what to do if an email fails those checks. It’s the instructions manual for the bouncer: do we let failures slide, do we quarantine them, or outright reject them?

 

A proper DMARC policy (ideally set to quarantine or reject, not just ‘none’) shows you’re serious about stopping spoofers.

Don't know DNS?

If you haven’t the first clue about DNS then just head over to your tech support person or the company that hosts your domain. It’s bread and butter for them. Point them in the direction of our in-depth guides on using SPF, DKIM and DMARC for email authentication.

 

Warning: do not drive or use heavy machinery after reading these guides.

SPF Guide

Your domain’s email bouncer

DKIM Guide

Signing your emails like a boss

DMARC Guide

The ultimate email bodyguard

Get in touch

24/7/365 support comes as standard. We know…this is not normal!

Live Chat

Chat with our support team 24/7

Email Support

support@pitchkraft.ai

Phone Support

Available on Standard & Premium plans

This will close in 0 seconds

This will close in 0 seconds

This will close in 0 seconds