# How Email Authentication Works (SPF, DKIM, DMARC)

### **Simple Explanation**

When you send an email, providers want to confirm:“Is this sender legitimate?”Authentication proves your emails are truly coming from your domain.

### **What This Includes**

* **SPF**: Defines which servers are allowed to send emails for your domain
* **DKIM**: Verifies the email hasn’t been altered
* **DMARC**: Tells providers how to handle suspicious emails

### **Why This Matters**

Without authentication:

* Emails are more likely to go to spam
* Some messages may be blocked entirely

With proper setup:

* Your emails appear more trustworthy
* Inbox placement improves

### **Advanced Details**

When Rechat sends emails on your behalf, it must align with your domain.This is called **DKIM alignment**.To achieve this, Rechat is authorized to send using a subdomain of your domain, improving trust with providers like Gmail and Outlook.

{% content-ref url="../../../appendix/brokerage-set-up/email-delivery/dns-self-service-setup" %}
[dns-self-service-setup](https://help.rechat.com/appendix/brokerage-set-up/email-delivery/dns-self-service-setup)
{% endcontent-ref %}