ojava
Start free trial

All guides

Email protection of your domain got weaker

What happened

The SPF or DMARC record of your email domain was removed or weakened. These records tell other mail servers which emails really come from you; without them, anyone can send emails that look like yours (fake invoices, changed bank details).

How serious

Serious: deal with it today.

Steps: Microsoft 365

  1. Ask whoever manages your domain's DNS (your IT provider, or the company where you bought the domain) whether they changed the SPF or DMARC record, and why.

  2. Put SPF back: at your DNS host, one TXT record on the domain itself (host @) with (v=spf1 include:spf.protection.outlook.com -all). Services that also send email for you go before the last part.

  3. Put DMARC back: a TXT record on the host _dmarc with (v=DMARC1; p=quarantine) or, once all your email passes, (v=DMARC1; p=reject).

  4. Changes can take up to 48 hours to show. Then check the domain again on Ojava's email check page: SPF and DMARC should be green.

    Open the page: ojava.ch/en/email-check
    Type the address yourself or use your bookmark: never follow a link in an unexpected email.

Steps: Google Workspace

  1. Ask whoever manages your domain's DNS (your IT provider, or the company where you bought the domain) whether they changed the SPF or DMARC record, and why.

  2. Put SPF back: at your DNS host, one TXT record on the domain itself (host @) with (v=spf1 include:_spf.google.com ~all). Services that also send email for you go before the last part.

  3. Put DMARC back: a TXT record on the host _dmarc with (v=DMARC1; p=quarantine) or, once all your email passes, (v=DMARC1; p=reject).

  4. Changes can take up to 48 hours to show. Then check the domain again on Ojava's email check page: SPF and DMARC should be green.

    Open the page: ojava.ch/en/email-check
    Type the address yourself or use your bookmark: never follow a link in an unexpected email.

How to check it’s fixed

Fixed when Ojava's email check shows SPF and DMARC green again for the domain.

When to call your IT provider

Call your IT provider today if nobody in your company changed this on purpose.