Authentication Best Practices


Google and Yahoo! are implementing new guidelines for bulk email senders on February 1, 2024, to protect against spam and improve deliverability. These changes will affect anyone who is sending bulk or marketing emails. ReachMail is handling everything we can, but your sending domain is something we can't control. If we did, wouldn't it be hard to spoof?

We recommend that if you do not have a current DMARC policy on the sending domain, you begin with a policy of at least none. If you are going to use our ReachMail of, know it has a DMARC quarantine policy. So, it is properly authenticated based on these new guidelines.


What kind of email authentication is right for you?

Domain Management Tool will allow ReachMail to authenticate your mail using your “from address” (sending) domain. This will help you build a strong sender reputation and enhance your brand.

Own Your Own Domain?

Awesome! Since you’re already sending from your domain, you can start by adding your sending domain to the Domain Managment Tool. To meet the requirement, you will need to add SPF and DKIM for your sending domain. DMARC is required for big bulk senders, but again, you are already here; you can do it here, too! 

Does IT or a larger organization own/manage your domain?

Ask them about the process or SOP for adding records to your organization's DNS. Your IT department/organization will need the SPF/DKIM and DMARC information from the Domain Management Tool within your account. You can create a user specifically for this team to have access to the domain information. Feel free to reach out to if you need us to help communicate with the people who manage this part of your email marketing.  

Own a domain but not sending email from it?

We get it. Many small businesses send from a Gmail or Yahoo! domain, even if they own the company domain. Gmail and Yahoo! will be using DMARC to ensure that people are not sending marketing emails from their domains. Check with your IT administrator or your domain hosting provider to see if setting up even one mailbox for marketing communications use is possible. If not, we've got you covered (see example below).


No domain? No worries! We have you covered!

The new requirements mean that we must authenticate each message using the domain found in the “from address”. So, if you can’t set up this kind of authentication or you don’t own your domain, ReachMail will authenticate messages for you.

For example, if you are sending from a domain you don’t own — or can’t modify the DNS records for, such as — we will modify your “from address” to But don’t worry. Subscribers will still see your Friendly From name from the Details section of your email. This domain will be shared by many and not specific to your brand.

Last Updated: 1/17/2024


Related Answers


Have more questions? Submit a request


Powered by Zendesk