CloudJet/Deliverability

SPF, DKIM and DMARC explained in plain English

The three DNS records every sending domain needs, what each one proves, and how to set them up in ten minutes.

CloudJet deliverability teamAug 28, 2026 6 min read
Deliverability02

Three records, three promises

SPF lists the servers allowed to send for your domain. DKIM adds a cryptographic signature proving the message was not altered. DMARC tells receivers what to do when either check fails — and sends you reports about it.

Getting them right

Keep a single SPF record per domain and stay under the ten-lookup limit. Use 2048-bit DKIM keys where your provider allows. Start DMARC at p=none to collect reports, then move to quarantine once you are confident every legitimate source is aligned.

CloudJet checks all three when you connect a mailbox and flags anything missing or misaligned before you send a single email.

Key takeaway

Deliverability is a habit, not a setting. Automate the guardrails, watch the signals, and scale only as fast as your reputation allows.

Get started

Scale outboundwithout the setup.

Connect your DNS provider, authenticate your domains and send your first campaign today — deliverability protection included.

SPF, DKIM and DMARC explained in plain English — CloudJet