MX routes incoming mail. SPF lists authorised sending systems, DKIM signs messages and DMARC defines policy and reporting around domain alignment. These records support authentication, but do not guarantee inbox delivery. Inventory all legitimate senders before tightening policy, especially when moving a website or mail service.
What to check
- List human mailboxes, forms, CRM and newsletter senders.
- Verify records against each provider’s instructions.
- Test mail after changes and review DMARC reports.