Why authentication matters
Receiving servers check whether your domain authorizes the server sending on its behalf. Without proper authentication, even well-written cold email lands in spam or gets rejected.
SPF
SPF (Sender Policy Framework) is a DNS TXT record on your domain listing the servers allowed to send its mail. If your mailbox provider also sends automated email on your behalf (as PersistIQ does when connected), the provider's sending source must be included in your SPF record.
DKIM
DKIM (DomainKeys Identified Mail) adds a cryptographic signature to each email, verified against a public key in your DNS. It proves the message wasn't altered in transit and ties it to your domain.
Setting them up
- Identify your DNS host (where your domain's records live).
- Get the required SPF/DKIM values from your mailbox provider's admin documentation.
- Add the records and wait for DNS propagation.
- Validate with a mail-tester tool or by checking headers on a received test email.
Caution: a domain can have only one SPF record — merge includes into the existing record rather than adding a second one.
DMARC (recommended)
Once SPF and DKIM pass, publish a DMARC policy record so inboxes have explicit guidance on handling failures. Start with a monitoring policy (p=none) before enforcing.
[CONFIRM: whether PersistIQ provides specific SPF include / DKIM values in-app]