Build correct SPF and DMARC DNS records for your domain — then copy and paste them into your DNS. Stops attackers spoofing your email.
mxaadkim=s; aspf=s; off = relaxedAdd each record in your DNS provider’s control panel as a TXT record at the Host/Name shown. Changes can take up to an hour to take effect.
Order of play: publish SPF and enable DKIM in your mail platform first, then start DMARC at p=none to gather reports, and tighten to quarantine then reject once your legitimate mail is passing.