Microsoft 365 SPF and DKIM Configuration: Step by Step 4

Setting Up SPF

SPF (Sender Policy Framework) prevents unauthorized senders from forging emails from your domain.

Step 1: Log in to your DNS provider.

Step 2: Create an SPF TXT Record that contains include:spf.protection.outlook.com

• Example for Cloudflare

Step 3: Save the record and verify that it's correctly propagated using tools like our SPF record checker.

Already have an SPF record?

Step 1: Log in to your DNS provider.

Step 2: Add include:spf.protection.outlook.com to your current SPF record

• Example for Cloudflare

Step 3: Save the record

Step 4: Verify that live using tools like our SPF record checker.

Setting Up DKIM

DKIM (DomainKeys Identified Mail) adds a digital signature to emails, ensuring that they haven’t been tampered with in transit.

Step 1: Log in to the Microsoft 365 Admin Center**.**

Step 2 : Navigate to DKIM Settings:

• Go to Admin Centers > Exchange > Protection > DKIM.

Step 3: Select your domain.

Step 4: Toggle the Enable and click Create DKIM Keys

Step 5: Publish the 2 CNAME records in the pop up window in your DNS manager

• Example for Cloudflare

Step 6: Enable DKIM signing on the M365 DKIM page

• Ensure the records are correct in your DNS and give them time to propagate. (Sometimes it usually takes 5-10 minutes)

Great work! Microsoft Office 365 is now correctly configured to send authenticated emails!

‍