Sometimes, users may encounter issues where SPF (Sender Policy Framework) or DKIM (DomainKeys Identified Mail) becomes invalid on their domain authentication. In this article, we will explain some common causes of why SPF / DKIM can become invalid and how to solve it.
Causes of SPF/DKIM Becoming Invalid
There are several reasons that can cause SPF or DKIM to become invalid. Below are some things to pay attention to:
1. The System Found Two SPF Records
One common issue that causes an SPF record to become invalid is when the system finds two SPF records on your domain. The SPF record should only be written once in the DNS zone for each domain. If more than one SPF record exists, it can confuse the receiving mail server, causing SPF validation to fail.
How to Fix It:
Ensure you have only one SPF record in the DNS domain. Combine multiple SPF values into one record if necessary.
Example: v=spf1 include:spf.mailtarget.co include:spf.otherdomain.com ~all
2. SPF / DKIM Writing Errors
Another common issue is errors in writing the SPF or DKIM records. Common mistakes include syntax errors or copying incorrect values.
How to Fix It:
Always double-check your SPF and DKIM records. Ensure that the format, characters, and values are correct as per the guide.
3. DKIM Record Deleted
DKIM works by verifying the digital signature in the email header. If the DKIM DNS record is deleted, the digital signature will not match the expected value for the recipient, causing the DKIM to become invalid.
How to Fix It:
Ensure your DKIM record is still present in the DNS and hasn't been deleted. If it's been deleted, make sure to add the correct record again.
How to Setup SPF / DKIM
If you want to re-setup SPF or DKIM, you can follow the steps outlined in our Complete Domain Authentication Guide. The guide covers all the necessary steps to ensure that your SPF and DKIM setups function correctly and are valid. For more information regarding SPF / DKIM, you can find it at the following link: SPF / DKIM.
Still Experiencing Issues?
If you are still having difficulties after following the guide above, don't worry! You can contact our support team via email at [email protected]. Our team will be ready to help you resolve any issues related to SPF / DKIM and other domain authentication problems.