● Done-for-you email setup
Your domain is easy to fake. We'll fix that.
We set up SPF, DKIM and DMARC on your business domain so other people can't send mail that looks like it came from you, and so Gmail and Yahoo trust the mail you actually send. You don't have to learn what any of that means.
Get it fixed →Run the free check firstStarting at $199 one time · Monitoring optional at $29/mo
Example · yourbusiness.com
v=spf1 include:_spf.google.com ~allLOOSEno key found for your mail providerMISSINGno recordMISSINGAfter we're done, all three read OK
01 · The problem
Three things go wrong when these records are missing
Spoofing
Someone sends mail as you
Without DMARC, nothing tells receiving mail servers to reject a message that fakes your address. A scammer can email your customers or your bookkeeper "from" you, asking for a payment or a password.
Gmail & Yahoo rules
The big inboxes now expect it
Gmail and Yahoo published sender requirements in 2024. Domains that send mail are expected to authenticate it with SPF and DKIM and to publish a DMARC record. Mail that doesn't line up gets treated with more suspicion.
Spam folder
Your real mail goes missing
Quotes, invoices and replies to customers can end up in spam, and you usually don't find out until someone says "I never got it." Fixing your records won't promise inbox placement, but it removes a common reason for the spam folder.
02 · What we do
Step by step, in plain English
We look at what you have
We read your current DNS records and figure out who sends mail for you: Google Workspace, Microsoft 365, your website form, QuickBooks, a newsletter tool. Missing one is how legit mail gets blocked, so we ask you too.
We write the records
One SPF record that covers every sender you use, DKIM turned on in your mail provider, and a DMARC record. We start DMARC in a watch-only mode so nothing of yours bounces while we confirm everything passes.
We put them in, or hand them over
If you give us access to your DNS (GoDaddy, Cloudflare, Squarespace, wherever it lives), we add them. If someone else manages it, we send them the exact records to paste in.
We test and tighten
We send test mail, check that SPF, DKIM and DMARC all pass, and then move DMARC to a stricter setting once your real mail is passing. You get a short note saying what changed and why.
03 · Price
One price for the fix. Monitoring if you want it.
The fix · one time
For a typical small business domain on Google Workspace or Microsoft 365. If you have several domains or a lot of tools sending mail, we'll tell you the price before we start.
- SPF, DKIM and DMARC set up and tested
- Every sender you use accounted for
- DMARC tightened once your mail passes
- A plain-English note of what we changed
Monitoring · monthly
Records break quietly. Someone adds a new email tool, a DNS change wipes a record, a provider rotates a key. We keep an eye on it and tell you when something needs attention.
- We watch your DMARC reports
- Email alert when something stops passing
- Cancel any time
Ask about it when you reply. No need to decide up front.
04 · Questions
Things people usually ask
How long does it take?
Usually 1 to 2 days from when we get DNS access or reach whoever manages it. DNS changes sometimes take a few hours to show up everywhere. Tightening DMARC to its stricter setting happens after we've seen your real mail pass, which can take a bit longer.
What access do you need?
Either a login to wherever your DNS lives (often your domain registrar, like GoDaddy, Namecheap or Cloudflare), or nothing at all: we send the exact records to your web person or IT company and they paste them in. For DKIM we may also need an admin on your Google or Microsoft account to click one button, and we'll walk them through it.
We use Google Workspace. Does that work?
Yes. We set up the Google SPF include, turn on DKIM signing in the Google Admin console, and publish the DKIM key in your DNS.
We use Microsoft 365. Does that work?
Yes. We add the Microsoft SPF include, create the two DKIM records Microsoft asks for, and switch DKIM signing on in the Microsoft Defender portal.
Will this break my email?
That's the reason we start DMARC in watch-only mode. Nothing gets rejected until we've confirmed that your real mail, including invoices and form notifications, is passing.
Is this the same as InboxGuards monitoring?
No. InboxGuards monitoring watches your mailbox audit records for signs of account takeover. This fix is about your domain's DNS records. They protect against different things, and you can have one without the other.
How do I pay?
Reply to the email or use the button. We confirm the price for your domain first and send a payment link before any work starts.
Not sure yet?
See what your domain shows right now
The free InboxGuards check reads your public DNS records. No signup, no mailbox access.