Do I need to add FreeAgent to my SPF or DMARC record?

Which address does FreeAgent send from?

By default, the 'From' address for these emails is automatically set to ' [email protected]

FreeAgent says in its own documentation that this email comes from [email protected]. That is FreeAgent's own domain, so the email is checked against FreeAgent's records, not yours.

Why does my DMARC record not cover these emails?

Author Domain: The domain name of the apparent author, as extracted from the RFC5322.From field.

DMARC is read for the domain in the From address a reader sees. When that domain is FreeAgent's, the check uses FreeAgent's records.

So your policy, from p=none to p=reject, has no effect on these emails. There is nothing to add to your SPF record for them.

Can FreeAgent send from my own domain instead?

However, if you own the domain from which you send your business emails (e.g. [email protected]), you can set up a custom email domain in your FreeAgent account and display the address in the 'From' field.

If you own your email domain, you can add a custom email domain so the invoice and estimate emails show your address in the From field.

In FreeAgent, choose Settings from the drop-down menu in the top-right corner, then Sending Emails.

If you turn that on, the email is sent as your domain, and your SPF, DKIM and DMARC records then apply to it. Publish the records FreeAgent shows you before you raise your DMARC policy.

FreeAgent says an SPF entry is needed only if your SPF record already ends in -all.

What should I watch for with FreeAgent email?

A forged email can copy the look of a FreeAgent message from any address. Read the address it came from, not the name shown, before you open a link or make a payment.