Skip to main content
New Mailbox providers (Gmail, Outlook, and others) only trust mail from a domain that authenticates correctly. Three DNS records do that work:
  • SPF — lists who is allowed to send for your domain.
  • DKIM — cryptographically signs your mail so it can’t be tampered with.
  • DMARC — tells receivers what to do with mail that fails SPF or DKIM, and is increasingly required by major providers.
If these aren’t right, your mail lands in spam or is rejected outright. Bizzy surfaces the status of all three per domain, so you always know whether a domain is ready to send.

Where to find it

Open a domain from Domains, then go to the Settings tab. The Email Authentication panel shows an overall verdict and the status of each record.
Email authentication panel showing SPF, DKIM and DMARC status
The verdict is one of:
VerdictWhat it means
Ready to sendSPF and DKIM are verified — mail authenticates correctly
Setting upAuthentication is being configured; this can take a few minutes
Action neededRecords are missing or failed verification — add them, then re-check
Not configuredEmail isn’t enabled on this domain yet

Registered vs. verified domains

How you manage these records depends on how the domain got into Bizzy:
  • Registered through Bizzy — Bizzy controls the DNS zone, so SPF, DKIM and DMARC are added and kept in sync automatically. The panel shows each record as Auto-managed; there is nothing for you to do.
  • Verified (DNS hosted elsewhere) — you add the records yourself. The panel shows the exact name, type and value for each record, with a copy button. Add them at your DNS provider, then re-check.

The records

For a verified domain you’ll add the SPF and DKIM records Bizzy provisions through its sending provider, plus the recommended DMARC record:
RecordTypeNotes
SPFTXTAuthorizes Bizzy’s infrastructure to send for your domain
DKIMCNAMEPoints at the signing key used to sign your mail
DMARCTXTPublished at _dmarc.<your-domain> — the policy below
Bizzy recommends a safe starting DMARC policy:
_dmarc.example.com.  IN  TXT  "v=DMARC1; p=none;"
p=none is monitoring mode: it asks receivers to report on failures without sending mail to spam. It’s the right place to start on a new domain. Once you’re confident everything authenticates, you can tighten the policy to p=quarantine or p=reject at your DNS provider.

Re-checking

After you add records (or any time you want to confirm), click Re-check. Bizzy re-runs verification with its sending provider and resolves each record live over DNS — including DMARC — and updates the status. DNS changes can take a few minutes to propagate, so if a record you just added still shows as missing, wait a little and re-check.

Before you create an email address

When you add an email address, only domains that are ready to send appear in the domain picker. If a domain has email setup underway but not finished, a warning lists it with its current status and a link straight to its settings, so you can finish authentication before relying on it.

Troubleshooting

ProblemLikely causeFix
Record added but still shows missingDNS hasn’t propagated yetWait 5–30 minutes, then Re-check
DKIM won’t verifyCNAME copied with a trailing typoRe-copy the value exactly; don’t add your domain to the target
DMARC shows as recommendedNo _dmarc record published yetAdd the _dmarc TXT record above, then re-check
Verdict stuck on “Setting up”Verification still in progressGive it a few minutes; Re-check to refresh

Next steps

Create an email address

Once a domain is ready to send

Manage DNS records

For domains registered through Bizzy
Last modified on June 8, 2026