Email Authentication

SPF, DKIMand DMARC.Automatically secure.

Conbool sets up SPF, DKIM and DMARC for your domain and takes it to enforcement in stages. With delegation the ongoing DNS maintenance is no longer needed.

Start free trialRequest a demo

Email Authentication with DMARC, SPF, and DKIM

Conbool signs outbound mail with DKIM, analyses DMARC reports and takes the policy to p=reject in stages. With DMARC Manager the ongoing maintenance of the records is no longer needed.

Why email authentication is essential

91%
of all cyberattacks start with an email
3.4B
phishing emails are sent daily worldwide
Required
Google, Yahoo, and Microsoft require DMARC since 2024
26%
of all domains still lack a DMARC policy

What are SPF, DKIM, and DMARC?

Three protocols that together ensure only authorized servers can send emails on your behalf.

SPF (Sender Policy Framework)

Defines which servers are allowed to send emails for your domain. Receiving servers check the SPF record and reject unauthorized senders.

DKIM (DomainKeys Identified Mail)

Cryptographically signs every outgoing email. The recipient can verify via the public key in DNS that the message hasn't been tampered with.

DMARC (Domain-based Message Authentication)

Links SPF and DKIM into a unified policy. Defines what happens to emails that fail authentication: deliver, quarantine, or reject.

What Conbool handles for you

Setup, analysis and enforcement from one source.

SPF in one place

With the delegation of DMARC Manager the permitted senders are collected behind one include. New sending sources appear in the analysis.

DKIM Signing

Every outgoing email is automatically signed with DKIM. Key rotation and DNS records are managed by Conbool for you.

DMARC Policy and Reporting

From monitoring (none) through quarantine to full rejection (reject). Conbool guides you step by step to the strictest policy.

Reporting Dashboard

See at a glance who is sending emails on your behalf. Unauthorized sources become immediately visible.

Anomaly Alerting

Are emails suddenly being sent from unknown servers? Conbool notifies you immediately and blocks if needed.

Compliance Documentation

Exportable reports for audits and compliance requirements. Verifiably compliant with GDPR, NIS2, and BSI standards.

What sets Conbool apart

Others offer monitoring. Conbool analyses and enforces.

No DNS access needed

Many DMARC tools require manual DNS access. Conbool handles everything through the integrated mail gateway.

Part of a complete solution

DMARC at Conbool isn't an isolated tool. It works seamlessly with SecureMail, MailGuard, and Disclaimer.

Made in Germany

All data stays in Germany. Full GDPR compliance without dependency on US cloud providers.

Simple, not complex

No expert knowledge required. Conbool guides you to complete DMARC protection in three steps.

Complete DMARC protection in three steps

1

Connect

Set up Conbool as the mail gateway for your domain. No DNS access required.

2

Monitor

Conbool analyzes your email traffic and identifies all legitimate and illegitimate sending sources.

3

Enforce

The enforcement card shows when the numbers support p=quarantine and then p=reject. DMARC Manager sets the level.

FAQ

What is DMARC and why do I need it?
DMARC (Domain-based Message Authentication, Reporting and Conformance) is an email authentication protocol that protects your domain from abuse. It builds on SPF and DKIM and defines how receiving servers should handle unauthenticated emails. Without DMARC, attackers can forge emails that appear to come from your domain.
Is DMARC now mandatory?
Yes. Google, Yahoo, and Microsoft have required a valid DMARC policy for bulk senders since 2024. Even for smaller organizations, DMARC is increasingly becoming a prerequisite for reliable email delivery. Under NIS2, email authentication is mandatory for affected companies.
What's the difference between SPF, DKIM, and DMARC?
SPF checks whether the sending server is authorized. DKIM verifies that the email hasn't been tampered with. DMARC combines both checks and specifies what happens to emails that fail: do nothing, quarantine, or reject.
How long does setup take with Conbool?
Basic configuration takes just minutes. However, Conbool recommends a monitoring phase of 2 to 4 weeks before switching to the strictest policy (reject). This ensures all legitimate sending sources are correctly captured.
Do I need DNS access to set up DMARC with Conbool?
Once, yes. The records are set via Domain Connect at the DNS provider where it is supported, or entered by hand once. With the delegation of DMARC Manager nothing changes in your zone afterwards.
Does Conbool DMARC work with Microsoft 365?
Yes. Conbool integrates natively with Microsoft 365 and Exchange Online. All email authentication runs automatically in the background.

Protect your domain starting today.

Setup, analysis and enforcement in one platform.

Start free trialRequest a demo
Conbool DMARC ReportsDiscover SecureMailDiscover MailGuardCheck NIS2 compliance