remark
Starting February 1, 2024, Gmail and Yahoo will require you to verify your domain and create a DMARC record to send emails to customers from a branded email address. If you don’t take action, your sending email address will be rewritten tostore+123@shopifyemail.com To meet the minimum requirements so you can continue sending emails to your customers without interruption. The numbers in the predefined email addressstore+123@shopifyemail.com Will be unique to your store.
If you notice that your emails are showing up in your customers’ mailboxes as…store+123@shopifyemail.com And if you want to change this, you will need to change your sending email address.
To understand the terms used in this article, please review Domain Terms .
Practical tip
If you use Gmail or Yahoo, it’s a good idea to check your security settings and make sure your domain is verified. This can prevent your emails from ending up in customers’ spam boxes.
Example 1: Sending from a DMARC-protected domain without authentication
If you are sending emails from a DMARC (Domain-based Message Authentication, Reporting, and Conformance) protected domain but have not verified your sending email address with DKIM and SPF, follow these steps:
Steps:
- Access your domains’ DNS records.
- Verify your sending domain by adding CNAME records to your domain.
Important note
If you’re not sure how to access your DNS records, contact your domain provider. They can provide you with the necessary information or help you make the necessary changes.
Interesting use
Using DMARC not only protects your emails from spoofing, but also allows you to receive reports of failed attempts to send emails on your behalf. This can help you identify potential threats and improve the security of your brand.
Example 2: Email domain belongs to a third party without DNS access
If your email domain belongs to a third party and you can’t access the DNS records to verify the domain, consider using your own domain. You can purchase a domain from Shopify or a third-party domain provider like GoDaddy or Namecheap.
Steps:
- Use your domain to send emails.
- Verify your sending domain.
- Add a valid DMARC record.
Useful tip
Purchasing your own domain not only gives you more control over your emails, but it also adds a professional touch to your brand. It can improve your credibility with customers.
Example 3: Domain purchased through an external entity without verification
If you purchased a domain through a third-party domain registrar but haven’t verified it yet, follow these steps:
Steps:
- Verify your sending domain.
- Make sure you have a valid DMARC record.
Interesting use
Domain verification can improve your email open rates. Customers are more likely to open emails that come from a verified, familiar address, which can lead to improved engagement and sales.
Example 4: Domain purchased through a third-party with verification but no DMARC record
If you purchased your domain through a third party and have already verified it, but don’t have a DMARC record, you will need to add a DMARC record.
recommendation
Use tools like DMARC Record Checker to make sure your records are set up correctly. This can save you a lot of headaches in the future.
Example 5: Domain purchased through Shopify
If you purchased your domain through Shopify, then a DMARC record will be automatically added to your DNS records if you don’t already have one. However, if you choose to cancel or revert this DMARC record, your email address will be rewritten tostore+123@shopifyemail.com .
To check your DMARC record, you can use the DMARC Record Checker .
Understanding DMARC
DMARC is a protocol designed to combat email spoofing. It allows domain owners to determine how emails that fail authentication should be handled. It is an important tool for any business looking to protect their brand.
How does DMARC work?
DMARC works in conjunction with two other protocols: DKIM (DomainKeys Identified Mail) and SPF (Sender Policy Framework). When an email is sent, DMARC checks whether the email meets the DKIM and SPF authentication requirements. If it doesn’t, DMARC can instruct the email to be deleted or moved to the spam folder.
DMARC setup
To set up DMARC, you need to add a TXT record to your domain’s DNS records. The record will contain the settings you want to apply to your emails. for example:
v=DMARC1; p=none; rua=mailto:admin@example.comIn this entry,p=none Indicates that no action is taken on non-compliant emails, andrua Specifies the email address to which reports of spoofing attempts will be sent.
DMARC reports
DMARC allows you to receive reports of spoofing attempts. These reports can help you understand if there are attempts to send emails in your name, and how you can improve your security.
Summary
Verifying your domain with DMARC is an important step for any business looking to protect their brand and improve the trustworthiness of their emails. You should make sure your domain is verified, that you have a valid DMARC record, and that you monitor DMARC reports to identify potential issues.
If you have any further questions or need help setting up DMARC, feel free to contact a domain expert or your domain service provider.
Understanding the importance of email security
Securing your emails is not just a technical matter, it’s also a matter of trust. Customers expect the emails they receive to be safe and reliable. When you send emails from a verified domain, you show your customers that you take security seriously.
Consequences of email spoofing
Email spoofing can cause serious damage to your business. It can lead to information theft, reputation damage, and even lawsuits. So it’s important to take steps to protect yourself.
Additional steps to improve security
- Use two-step verification for your email accounts.
- Make sure to use strong and unique passwords for each account.
- Educate your team about the dangers of phishing and how to identify suspicious emails.
- Perform periodic security checks on your systems.
Summary and recommendations
Domain verification with DMARC is a crucial step in protecting your brand. Don’t wait until it’s too late. Act now to ensure your emails reach your customers securely and reliably.
If you need additional help, consider reaching out to a security expert or professional services who can assist you with setting up DMARC and other steps to improve your security.
