Skip to content

Email DNS · with Mailaholic

MX, SPF, DKIM and DMARC records explained

The short answer

Four DNS records make business email work. MX says which server receives your mail. SPF lists the servers allowed to send as you. DKIM adds a signature that proves a message really came from your domain. DMARC tells receivers what to do when SPF or DKIM fail, and where to send reports. Without them, mail is lost or lands in spam.

Before you start

  • Nothing to install. These records live with whoever runs your domain’s DNS.
  • Mailaholic shows the exact values for your domain and checks each one live.

The records you will add

Mailaholic shows the exact values for your domain. For a domain like yourdomain.com they look like this:

TypeNameValuePriorityWhat it does
TXT_mailnest-verifymailnest-verify=… (your own code, shown in the dashboard)—Step 1 only: proves the domain is yours
MX@mx.workaholicdevelopers.com10Brings incoming email to your mailboxes
TXT@v=spf1 a:mx.workaholicdevelopers.com ~all—SPF: lets our server send as you
TXTdkim._domainkeyv=DKIM1;… (your own key, shown in the dashboard)—DKIM: signs every message you send
TXT_dmarcv=DMARC1; p=none; rua=mailto:… (shown in the dashboard)—DMARC: reporting, starting in monitor mode

Step by step

  1. MX: where your mail is delivered

    Senders look up your domain’s MX record to find the receiving server. With Mailaholic it is mx.workaholicdevelopers.com, priority 10. If an old MX record stays, some mail goes to the old provider.

  2. SPF: who may send as you

    A TXT record on the domain itself, starting with v=spf1. Mailaholic’s is v=spf1 a:mx.workaholicdevelopers.com ~all. A domain may have only ONE SPF record, so merge instead of adding a second.

  3. DKIM: a signature on every message

    Your outgoing mail is signed with a private key, and receivers check it against the public key in a TXT record named dkim._domainkey. A wrong name or a key cut short in copying is the usual mistake.

  4. DMARC: the policy and the reports

    A TXT record named _dmarc. Mailaholic starts you on p=none, which only asks for reports. Once you are sure all your mail passes, you can tighten it to quarantine or reject.

Check that it worked

  • Mailaholic checks MX, SPF, DKIM and DMARC live and marks each green or red.
  • From a terminal you can look them up too, for example dig MX yourdomain.com or dig TXT _dmarc.yourdomain.com.

Checked October 2026 against each provider’s own help pages. Menus move — if a label differs on your screen, look for the nearest match.

Problems and questions

Mail still goes to my old provider
An old MX record is still there. Delete every MX record that does not point to mx.workaholicdevelopers.com.
SPF shows red
A domain may only have ONE SPF record (a TXT starting with v=spf1). If there is an older one, replace it, or merge both into a single record if you still send mail from another service.
DKIM shows red
Check the name. Most panels add your domain for you, so the name is just dkim._domainkey. Typing dkim._domainkey.yourdomain.com there makes it dkim._domainkey.yourdomain.com.yourdomain.com.
Do I need all four?
MX is required to receive mail. SPF, DKIM and DMARC are what the big inbox providers check before trusting your mail, so in practice you need all four.
What does ~all mean in SPF?
It is a “soft fail”: mail from servers not on the list should be treated with suspicion rather than rejected outright.
Is p=none safe?
Yes. It changes nothing about delivery. It only asks receivers to send reports, so you can see who sends mail as your domain before you enforce anything.
Can I use these records for a subdomain?
Yes. The names gain the subdomain, for example _dmarc.mail for mail.yourdomain.com. Mailaholic shows the right names for you.

Sources: developers.cloudflare.com/dns/troubleshooting/email-issu..., godaddy.com/resources/mindset/configuring-dns-for-email-...

Built and run by Workaholic Developers.