What is Email Authentication
Email authentication (or email validation) is the process used to verify the source and legitimacy of your email message. As you may have seen in news articles online, full authentication is vital for email delivery to many email providers like Outlook, Gmail and Yahoo who require full delivery authentication and alignment as standard.
Email Authentication helps providers verify the origin of a message: whether it comes from a trustworthy source or has been faked or forged by spammers, scammers, and spoofers pretending to be someone they are not.
Setting up DKIM, SPF and DMARC records for your NewZapp Account.
Bounce Handler
Please follow these steps to add a DNS record to point to our Bounce Handler for your sending domain. This process won't impact your corporate or organizational email.
Please add a CNAME DNS Record with the following detail:
Type: CNAME
Hostname: bounced.[Your Domain*]
Value: bounced.newzapp.co.uk
SPF
When sending through NewZapp you need to add an SPF to your full sending domain in order to achieve Full Alignment of DMARC, SPF & DKIM. Please add one of the following details:
Add include:_spf.newzapp.co.uk to your existing record.
If you do not have an SPF record then create one as follows:
Type: TXT
Hostname: @
Value: v=spf1 include:_spf.newzapp.co.uk -all
DKIM
To set up DKIM on your account, you will need to create three new CNAME DNS records for the sending domain as follows:
Type: CNAME
Hostname: nz-k1._domainkey.[Your Domain*]
Value: nz-k1.dkim.newzapp.co.uk
Type: CNAME
Hostname: nz-k2._domainkey.[Your Domain*]
Value: nz-k2.dkim.newzapp.co.uk
Type: CNAME
Hostname: nz-k3._domainkey.[Your Domain*]
Value: nz-k3.dkim.newzapp.co.uk
DMARC
DMARC is used to enhance email security by helping prevent email spoofing and phishing attacks. Please add a TXT DNS Record with the following detail
Type: TXT
Hostname: _dmarc
Value: v=DMARC1; p=none;
[Your Domain*] is your sending domain without the brackets. Do not add this manually to the Hostname for the Bounce Handler or DKIM. Your DNS provider does this automatically.
What to do once you have actioned the above
Click on your Avatar (top right of the platform) and select Account Management.
Select Configuration and you'll be on the Email Authentication page.
Enter your sending domain (just the domain, not your sending email address) in the box provided and click Submit
Then click Verify. If everything has been installed correctly for the sending domain you will see the following.
Any elements that remain orange will need to be checked with your IT team or whoever controls your domains DNS. You can click the "Get Started PDF" that will download a PDF with these instructions. You can pass that to your IT team.
Sending email campaigns without full email authentication run the risk of not been delivered.