Questions & answers
Clear, plain-language answers to the most-asked questions about DMARC, SPF, DKIM, spam folders, SSL certificates and website speed.
Email security
What is DMARC?
DMARC is a DNS record that tells mail servers what to do with email that pretends to come from your domain but fails SPF and DKIM checks.
What is a DMARC record?
A DMARC record is a TXT record published at _dmarc.yourdomain.com that starts with v=DMARC1 and sets your policy with the p= tag.
How do I set up DMARC?
Make sure SPF and DKIM are working, then add a TXT record at _dmarc.yourdomain.com starting with p=none, and tighten it to quarantine and reject over a few weeks.
How does DMARC work?
When an email arrives, the receiving server checks SPF and DKIM, confirms they match the domain in the From address, and then follows your DMARC policy if they do not.
What does "DMARC quarantine/reject policy not enabled" mean?
It means your DMARC record uses p=none, which only monitors — forged emails using your domain are still delivered.
How do I read DMARC reports?
DMARC reports are XML files listing every server that sent mail as your domain, how many messages it sent, and whether each passed SPF and DKIM.
What is an SPF record?
An SPF record is a TXT record on your domain, starting with v=spf1, that lists which servers are allowed to send email for you.
How do I add multiple SPF records?
You can't — a domain must have exactly one SPF record, so combine all your services into a single v=spf1 line.
How do I check my SPF record?
Enter your domain in a free checker like DomainGuard — it looks up your TXT records, finds the v=spf1 line, and tells you if it is valid, strict and under the 10-lookup limit.
What are SPF, DKIM and DMARC records?
They are three DNS records that work together to prove your emails are really from you: SPF lists approved servers, DKIM signs each message, and DMARC says what to do when checks fail.
How do I check my DKIM record?
You need your DKIM selector (a name like google or s1), then look up selector._domainkey.yourdomain.com — a checker like DomainGuard tries common selectors for you.
What is DNSSEC and do I need it?
DNSSEC adds digital signatures to your domain's DNS records so visitors can't be sent to a fake copy of your site or mail server; it is worth turning on if your registrar offers it.
Spam & deliverability
Why are my emails going to spam?
The most common reasons are missing or broken SPF, DKIM or DMARC records, sending from a new or low-reputation domain, and spam-like content or too many links.
How do I prevent my emails from going to spam?
Set up SPF, DKIM and DMARC, send from your own domain, keep your list clean, and write plain, personal emails with few links.
How do I stop getting spam emails?
Mark junk as spam (don't just delete it), unsubscribe from real mailing lists, never reply to obvious spam, and use filters or a separate address for sign-ups.
What is email spoofing and how do I stop it?
Email spoofing is when someone sends email that fakes your address in the From line; you stop it by publishing SPF, DKIM and a strict DMARC policy.
Website health
How do I check if a website is down?
Use a website health checker from outside your network — if it can't reach the site either, the site is down for everyone, not just you.
Why does my website say "Not secure"?
Browsers show "Not secure" when a page loads over plain http, or when its security certificate is missing, expired or for a different name.
How do I check when my SSL certificate expires?
Click the padlock in your browser's address bar and view the certificate, or run a free website health check, which shows the expiry date and warns you when it is close.
How do I make my website load faster?
Shrink large images, remove plugins and scripts you don't need, turn on caching, and use a content delivery network (CDN).
How do I know if my website is mobile friendly?
Open it on a phone and check that text is readable without zooming and buttons are easy to tap — or run a health check that looks for the mobile viewport setting.