You don't need to edit DNS yourself — here's what to ask for to protect your customers from fake mail.
Confirm SPF includes every service that sends mail for you (Google, Microsoft, CRM, newsletter tools). Turn on DKIM in your email platform and publish its DNS record.
_dmarc.yourdomain.comp=none) if needed, with reports sent to a mailbox you controlp=quarantine then p=reject when legitimate mail passes checksPlease add DMARC for our domain with alignment on SPF and DKIM, starting at quarantine or reject per your recommendation. Include rua reporting to our security contact.
After DNS propagates, run our free domain check again. Your fake-email blocking line should show Protected and your grade should improve.
Often 1–24 hours; some providers up to 48 hours.