Email records
How do I publish DMARC, SPF and DKIM at my DNS host?
Pick your DNS host and your mail service below. Each page gives the exact record for Microsoft 365 or Google Workspace and the steps in your DNS host's own screens, with a link to the host's help page and the date we read it.
Last read , from the sources at the foot of this page.
01
How do I publish DMARC at my DNS host?
DMARC tells mail servers what to do with mail forged in your name.
- GoDaddy for Microsoft 365
- GoDaddy for Google Workspace
- Cloudflare for Microsoft 365
- Cloudflare for Google Workspace
- Squarespace for Microsoft 365
- Squarespace for Google Workspace
- Wix for Microsoft 365
- Wix for Google Workspace
- SiteGround for Microsoft 365
- SiteGround for Google Workspace
- Network Solutions for Microsoft 365
- Network Solutions for Google Workspace
- Amazon Route 53 for Microsoft 365
- Amazon Route 53 for Google Workspace
- Hostinger for Microsoft 365
- Hostinger for Google Workspace
- IONOS for Microsoft 365
- IONOS for Google Workspace
- Namecheap for Microsoft 365
- Namecheap for Google Workspace
- Microsoft Azure DNS for Microsoft 365
- Microsoft Azure DNS for Google Workspace
02
How do I publish SPF at my DNS host?
SPF lists the services allowed to send mail as your domain.
- GoDaddy for Microsoft 365
- GoDaddy for Google Workspace
- Cloudflare for Microsoft 365
- Cloudflare for Google Workspace
- Squarespace for Microsoft 365
- Squarespace for Google Workspace
- Wix for Microsoft 365
- Wix for Google Workspace
- Network Solutions for Microsoft 365
- Network Solutions for Google Workspace
- Amazon Route 53 for Microsoft 365
- Amazon Route 53 for Google Workspace
- Hostinger for Microsoft 365
- Hostinger for Google Workspace
- IONOS for Microsoft 365
- IONOS for Google Workspace
- Namecheap for Microsoft 365
- Namecheap for Google Workspace
03
How do I publish DKIM at my DNS host?
DKIM signs each message so a forged or changed one fails.
- GoDaddy for Microsoft 365
- GoDaddy for Google Workspace
- Cloudflare for Microsoft 365
- Cloudflare for Google Workspace
- Squarespace for Microsoft 365
- Squarespace for Google Workspace
- Wix for Microsoft 365
- Wix for Google Workspace
- SiteGround for Microsoft 365
- SiteGround for Google Workspace
- Network Solutions for Microsoft 365
- Network Solutions for Google Workspace
- Amazon Route 53 for Microsoft 365
- Amazon Route 53 for Google Workspace
- Hostinger for Microsoft 365
- Hostinger for Google Workspace
- IONOS for Google Workspace
- Namecheap for Microsoft 365
- Namecheap for Google Workspace
- Microsoft Azure DNS for Google Workspace
Sources
Where does this come from?
- GoDaddy: adding a TXT recordRead 14 October 2026
- GoDaddy: adding a CNAME recordRead 14 October 2026
- Cloudflare: adding a TXT recordRead 14 October 2026
- Cloudflare: Proxy statusRead 14 October 2026
- Cloudflare: adding a CNAME recordRead 14 October 2026
- Squarespace: adding a TXT recordRead 14 October 2026
- Squarespace: adding a CNAME recordRead 14 October 2026
- Wix: adding a TXT recordRead 14 October 2026
- Wix: adding a CNAME recordRead 14 October 2026
- SiteGround: adding a TXT recordRead 14 October 2026
- Network Solutions: adding a TXT recordRead 14 October 2026
- Amazon Route 53: adding a TXT recordRead 14 October 2026
- Amazon Route 53: Supported DNS record typesRead 14 October 2026
- Hostinger: adding a TXT recordRead 14 October 2026
- Hostinger: adding a CNAME recordRead 14 October 2026
- IONOS: adding a TXT recordRead 14 October 2026
- Namecheap: adding a TXT recordRead 14 October 2026
- Namecheap: adding a CNAME recordRead 14 October 2026
- Microsoft Azure DNS: adding a TXT recordRead 14 October 2026
- Microsoft: Set up DMARC for your Microsoft 365 domainRead 14 October 2026
- Microsoft: Set up SPF for your Microsoft 365 domainRead 14 October 2026
- Microsoft: Set up DKIM for your Microsoft 365 domainRead 14 October 2026
- Google Workspace: Set up DMARCRead 14 October 2026
- Google Workspace: Set up SPFRead 14 October 2026
- Google Workspace: Set up DKIMRead 14 October 2026
05 · Check my firm
See what is open before anyone else does.
We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.
What we readPublic sources only
Who sees itYou alone
Delivery72 hours from confirmation
Meeting firstNone
Reading requestPrivate
Received
A person reads your firm from outside and emails your outside reading within 72 hours, from [email protected].
What happens next
- We read your firm from outside.
- You see what is open, with the proof for the lead finding.
- If it is worth it, you order.
While you wait: the 72 hours · 34 seconds, no sound
What happens if you go ahead. More at getleaktrace.com/see-it-first/.
Read the transcript
- 72 hours. One domain. Nothing to install.
- Discover. Every way in, found from outside.
- Validate. Every finding, proven. Dated and checkable by anyone.
- Close. Forged email: one click per step, where we reach your DNS host and you approve it.
- You get the fix for the rest, step by step, and we re-check until it is closed.
- Monitor. On monitoring: email settings, look-alikes and new host names re-checked every hour. Alerts within the hour.
- Every paid assessment is human-verified before release.
- The AI defense layer for businesses. getleaktrace.com/see-it-first/