Key points
- MX routes inbound mail
- SPF/DKIM/DMARC authenticate outbound mail
- All four together = inbox delivery + spoof protection
- Each lives in your registrar's DNS panel
How to do it
- MX: point at provider's mail servers
- SPF: add TXT with allowed senders
- DKIM: add TXT with signing key
- DMARC: add TXT with policy
Common mistakes
- Setting MX but skipping authentication
- Conflicting records
- Forgetting subdomains
One guided flow for all four — freeNo card required — free forever up to 10 mailboxes.