Email Security Blog
Practical guides on SPF, DKIM, DMARC, deliverability, blacklists, and protecting your domain from spoofing and phishing.
Best DMARC Monitoring Tools (Free and Paid) in 2026
Comparing the best DMARC monitoring tools for reading aggregate reports, tracking sender authentication, and managing your path to p=reject. Free and paid options reviewed.
BIMI Setup Guide: How to Display Your Logo in Gmail and Apple Mail
BIMI (Brand Indicators for Message Identification) displays your company logo next to authenticated emails in Gmail, Apple Mail, and Yahoo. Here's how to set it up — and what you need in place first.
DKIM Signature Failed: What It Means and How to Fix It
A DKIM signature failure means receiving mail servers can't verify your email's authenticity. Here are the six most common causes and exactly how to fix each one.
DMARC Aggregate Reports: How to Read and Act on Them
DMARC aggregate reports tell you who is sending email from your domain and whether they're passing authentication. Here's what's in them, how to read them, and what to do with the data.
How to Warm Up a New Email Domain (And Why Skipping It Destroys Deliverability)
Sending email from a new domain without a warm-up period is one of the fastest ways to land in spam permanently. Here's the correct warm-up process, timeline, and what to watch for.
Google Workspace vs Microsoft 365: Email Security Features Compared
Comparing Google Workspace and Microsoft 365 on email security — SPF/DKIM/DMARC defaults, anti-phishing controls, admin visibility, and what each platform leaves you to configure yourself.
PowerDMARC Alternative: Free Tools That Do the Same Job
Looking for a PowerDMARC alternative? Compare free and lower-cost DMARC tools that offer the same aggregate report parsing, sender discovery, and enforcement guidance without the enterprise price tag.
Shopify Email Authentication: How to Set Up SPF, DKIM, and DMARC
Shopify stores send transactional and marketing emails from your domain. Here's how to set up SPF, DKIM, and DMARC correctly for Shopify — and what breaks if you don't.
SPF Hard Fail vs Soft Fail: What the Difference Means for Your Email
The difference between -all and ~all in your SPF record determines how receiving servers treat unauthorised senders. Here's what each setting does and which one you should use.
SPF Too Many DNS Lookups: How to Fix the 10-Lookup Limit
Exceeding SPF's 10-lookup limit causes a permanent error that breaks authentication for every email you send. Here's what counts toward the limit, how to check yours, and how to fix it.
How to Add Mailchimp, HubSpot, or Salesforce to Your SPF Record Without Breaking It
Every time you add a new email tool, your SPF record needs updating. Here's how to add third-party senders correctly — and what to do if you're hitting the 10-lookup limit.
The Real Cost of Email Spoofing: What Happens When Your Domain Is Impersonated
Email spoofing costs SMBs an average of $137,000 per incident. Here's a breakdown of the direct, indirect, and operational costs — and what stops it.
DMARC Policy: None vs Quarantine vs Reject — When to Use Each
Understand the three DMARC policy levels — p=none, p=quarantine, and p=reject — and how to move through them safely without breaking your email delivery.
Email Authentication Setup for Microsoft 365: SPF, DKIM, and DMARC
Complete guide to setting up SPF, DKIM, and DMARC for Microsoft 365. Includes exact DNS records, Admin Center steps, and how to verify everything is working.
Email Deliverability Checklist: 15 Things to Check Before Every Send
A practical 15-point email deliverability checklist covering authentication, content, list hygiene, and sender reputation — everything to check before you hit send.
Google Workspace Email Migration Checklist: Verify SPF, DKIM, and DMARC Before You Go Live
Moving to Google Workspace? Use this checklist to verify SPF, DKIM, and DMARC are correctly configured before cutover — so you don't lose a single email during migration.
How to Check if Your Domain Is on an Email Blacklist (And What to Do)
If your emails are bouncing or going to spam, your domain or IP may be blacklisted. Here's how to check across 12 blacklist zones and what to do if you're listed.
How to Set Up DMARC for Google Workspace (Step-by-Step)
Step-by-step guide to setting up DMARC for Google Workspace. Includes exact DNS record format, how to start safely with p=none, and how to progress to full enforcement.
MXToolbox Alternatives: 5 Free Email Security Checkers Compared
Looking for an MXToolbox alternative? Here are 5 free email security tools compared — including which ones require signup, what they check, and whether they offer help fixing what they find.
SPF, DKIM, and DMARC: What They Are and Why Every Business Needs All Three
SPF, DKIM, and DMARC are the three email authentication standards that protect your domain from spoofing and phishing. Here's what each one does and how to check if yours are set up.
What Is Business Email Compromise (BEC)? How SMBs Get Targeted and How to Stop It
Business Email Compromise costs SMBs an average of $137,000 per incident. Here's how BEC attacks work, why small businesses are targeted, and what stops them.
Why Are My Emails Going to Spam? (And How to Fix It)
Emails landing in spam? Here are the most common causes — missing authentication, blacklists, spam content — and a step-by-step process to diagnose and fix each one.