What are SPF and DKIM?
SPF and DKIM are email authentication methods that confirm your messages are sent from your domain and remain unaltered. They help prevent spoofing and enhance email deliverability.
What is SPF?
SPF (Sender Policy Framework) is a type of DNS record that identifies which servers are permitted to send emails on behalf of your domain.
When an email arrives, the receiving mail server checks your SPF record to confirm that the sending server is allowed. If it isn’t listed, the message is more likely to be marked as spam or rejected.
In tawk.to, the Return-Path configuration used in the Remove Branding add-on takes care of SPF for your ticket emails.
What is DKIM?
DKIM (DomainKeys Identified Mail) is a security measure that works like a tamper-proof seal for your emails.
When you send an email, your mail server adds a digital signature created with a private key. The receiving server uses your public key (stored in your domain’s DNS) to verify the signature. This confirms the message was authorized by your domain and hasn’t been changed during delivery.
In the Remove Branding for Tickets setup, you’ll add two CNAME records to enable DKIM for ticket emails.
How SPF and DKIM work together (with DMARC)
SPF confirms who can send emails from your domain. DKIM verifies that the content is intact and tied to your domain.
DMARC builds on both by telling receiving servers what to do if SPF and/or DKIM fail, and checking that they align with your domain.
For instructions on setting up DMARC, see this guide: How to set up a DMARC Record
Where this appears in tawk.to
These settings are part of the Remove Branding add-on when sending ticket emails from your domain. For full instructions, see these guides:
Setting up the Remove Branding add-on
Setting up Remove Branding for TicketsTips
Enter only the host or subdomain your domain registrar needs (for example, tawk1._domainkey instead of tawk1._domainkey.example.com if instructed).
DNS updates may take time to go live, so verification might not be instant.
If you’re new to DMARC, start with a monitoring policy (p=none) before moving to stricter settings.
Additional information
Need a quick refresher on DNS record types? See this guide: What are TXT and CNAME?
SPF is officially defined in RFC 7208, and DKIM in RFC 6376. These are the technical specifications for each standard.
If you have feedback about this article, or if you need more help:
Click the green live chat icon
Schedule a call with us
Visit our community