Skip to content

Senders Passing SPF but not DKIM

This page displays a table of senders (by domain) which have recently passed SPF Align, but never passed DKIM Align in the same period. This is an indicator that they are authorised but DKIM is not setup, or is incorrectly setup.

Purpose

The table serves as a guide to help identify potentially legitimate senders which may benefit from DKIM being setup. It should be used to improve email authentication and deliverability.

The results should be used as a guide to which recent senders do not have DKIM enabled or do not have DKIM setup correctly. It is a summary of results available in the Dashboard under View Senders.

Note: Not all senders support DKIM. But the majority do.

Key Points

  • Refer to the sender's documentation for DKIM setup instructions.
  • It is recommended to have DKIM setup for senders where supported for maximum deliverability when enforcing DMARC.
  • While SPF Align alone is sufficient for a message to be DMARC compliant, SPF Align may fail in certain edge-case scenarios, including when a recipient has a forward enabled.
  • Once you enable DKIM for a sender, check back in a few days to confirm they are no longer listed here.

Table Columns

The table includes the following columns:

  • Domain: The Header From domain, this is the domain that may benefit from DKIM being setup with the Sender.
  • Sender: The source domain of the email sender.
    • For known senders, this column displays a logo, a friendly name, and an info icon.
    • For other senders, it shows the source domain or, where there was no lookup available, the IP.

Empty State

An empty table indicates there is no recent data that matches the conditions, which is is an indication your DMARC compliant mail senders are setup with DKIM already.

If you have recently on-boarded domains, check back in a few days.