Skip to content
More support
Raise A Ticket
  • There are no suggestions because the search field is empty.

Email Authentication

 

What is Email Authentication

Email authentication (or email validation) is the process used to verify the source and legitimacy of your email message. As you may have seen in news articles online, full authentication is vital for email delivery to many email providers like Outlook, Gmail and Yahoo who require full delivery authentication and alignment as standard.
 
Email Authentication helps providers verify the origin of a message: whether it comes from a trustworthy source or has been faked or forged by spammers, scammers, and spoofers pretending to be someone they are not.
 
 

Setting up DKIM, SPF and DMARC records for your NewZapp Account.

Bounce Handler

Please follow these steps to add a DNS record to point to our Bounce Handler for your sending domain. This process won't impact your corporate or organizational email.
Please add a CNAME DNS Record with the following detail:
 
Type: CNAME
Hostname: bounced.[Your Domain*]
Value: bounced.newzapp.co.uk
 

SPF

When sending through NewZapp you need to add an SPF to your full sending domain in order to achieve Full Alignment of DMARC, SPF & DKIM. Please add one of the following details:
 
Add include:_spf.newzapp.co.uk  to your existing record.
 
If you do not have an SPF record then create one as follows:
Type: TXT
Hostname: @ 
Value: v=spf1 include:_spf.newzapp.co.uk -all
 

DKIM

To set up DKIM on your account, you will need to create three new CNAME DNS records for the sending domain as follows:
 
Type: CNAME
Hostname: nz-k1._domainkey.[Your Domain*]
Value: nz-k1.dkim.newzapp.co.uk
 
Type: CNAME
Hostname: nz-k2._domainkey.[Your Domain*]
Value: nz-k2.dkim.newzapp.co.uk
 
Type: CNAME
Hostname: nz-k3._domainkey.[Your Domain*]
Value: nz-k3.dkim.newzapp.co.uk
 

DMARC

DMARC is used to enhance email security by helping prevent email spoofing and phishing attacks. Please add a TXT DNS Record with the following detail
 
Type: TXT
Hostname: _dmarc
Value: v=DMARC1; p=none;
 
 

[Your Domain*] is your sending domain without the brackets. Do not add this manually to the Hostname for the Bounce Handler or DKIM. Your DNS provider does this automatically.

 

What to do once you have actioned the above

Click on your Avatar (top right of the platform) and select Account Management.
 
Select Configuration and you'll be on the Email Authentication page.
 
Enter your sending domain (just the domain, not your sending email address) in the box provided and click Submit
 
A screenshot of the authentication screen without any of the authentication steps completed.
Then click Verify. If everything has been installed correctly for the sending domain you will see the following. 
 
A screenshot of the authentication screen with all of the authentication steps completed.
Any elements that remain orange will need to be checked with your IT team or whoever controls your domains DNS.  You can click the "Get Started PDF"  that will download a PDF with these instructions. You can pass that to your IT team.
 
Sending email campaigns without full email authentication run the risk of not been delivered. 
 
Once your authentication has been set up, the sending domain will then be preset in the NewZapp sending wizard so you only need to enter the first half of the address. Below is an example from one of our customers for how this will look.
 
Authenticated from address
 
You'll also see this confirmation on the start screen every time you log in.
 
Authentication start screen tile
 
 
 

What if my email address isn't authenticated?

 
If you try to send an email through NewZapp with an email address that isn't authenticated. NewZapp will update your From Address to be sent from the @newzapp.co.uk email domain. Our domain is authenticated and so your emails will then be delivered.
 
Unauthenticated From Address

Your address will be updated to be

"no-reply-[company name set in NewZapp]@newzapp.co.uk".

The screenshot above was taken from our NewZapp Communications account, so the email appears in an inbox like this.

Unauthenticted From Address in an inbox

If you have safe senders set up in NewZapp you would normally be able to select the From Address from a preset list in a drop down box, however if your domain is not authenticated this drop down box won't be present and your From Address will be set in the format specified above.

 

What if I cannot authenticate my domain?

No problem, reach out to your account manager today and we can go through some options for you that will ensure your email campaigns are getting their maximum deliverability.

Raise A Ticket

If you have any questions about Authentication, please reach out to your account manager or email support@newzapp.com