How do I set up Front so its email passes DMARC?

What does Front ask me to publish?

SPF/DKIM records are industry-standard security mechanisms that authorize Front to send emails on our customers' behalf.

Front also gives MX records, for the replies and bounces it receives. Add them only at the name Front shows you, never at your domain itself: the MX records at your domain decide where all of your email is delivered.

Where in Front are my values shown?

Step 1 Click the gear icon, navigate to your company settings, then select Security in the sidebar. Step 2 In the Deliverability tab, company admins can configure SPF/DKIM records.

In Front, click the gear icon, open your company settings, choose Security, then open the Deliverability tab.

Copy each value from there exactly as shown, and add each record at your DNS host.

Will p=reject block Front email?

DMARC is an optional deliverability record unrelated to Front

It can, if the email does not pass SPF or DKIM for your own domain. DMARC passes only when one of them passes for your own domain.

Front treats DMARC as an optional record that is separate from the SPF and DKIM records it asks for.

Before you raise your policy, read your DMARC reports and check that email from Front passes.