Set up SPF, DKIM, and DMARC

SPF

Publishes allowed senders. Example:

v=spf1 include:_spf.midas.host ~all

Enable in your email panel, then publish the CNAME/TXT keys provided.

Start with a monitoring policy:

v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com; pct=100

Increase to p=quarantine or p=reject after reviewing reports.

Use tools like MXToolbox to confirm records are valid.