iGears logo
Contact Us
Accessibility

Make yourself comfortable.

Adjust this website to make reading easier for you.

150% text, high contrast, more line spacing, underlined links and less motion. You can adjust each setting below.

125% text, more line spacing, underlined links and less motion.

Colour contrast

Preferences stay in this browser. No account needed.

Need another adjustment? Tell iGears

iGears Editorial Team

Microsoft 365 email settings: SPF, DKIM, DMARC and delivery

A working Microsoft 365 mailbox does not mean the website and other platforms use the same sending path. List all services, then check SPF, DKIM and From alignment for each source.

Illustration of website email passing through a sending service and authentication checks to an inbox

How to check it yourself

  1. Send a test message from Microsoft 365, retain headers and any bounce, and note the example.org.hk From address.
  2. Compare SPF and DKIM records with the actual values supplied for Microsoft 365; do not copy another tenant’s DKIM values.
  3. SPF lists the servers allowed to send for a domain; a sender not listed fails. DKIM is signed by each sending service; a service that does not sign has no DKIM. DMARC needs SPF or DKIM to pass and align with the From domain. p=none does not stop Gmail filtering or rejection.
  4. Test the website and other sending platforms separately and record the results. Start diagnosis with read-only views or a screen-share.

Record examples

Illustrative only: do not copy into production settings. Use the values supplied for your organisation.

From: support@example.org.hk
_dmarc.example.org.hk TXT "v=DMARC1; p=none"

Common causes

A common gap is configuring the mailbox service while overlooking the website sender, missing DKIM signing or DMARC alignment with From.

When to get help

If you lack access or cannot identify senders, ask your IT provider to arrange temporary Global Reader access or a screen-share. Do not share passwords.

Want someone to help review it? Apply for a free IT platform check.

Monthly capacity is limited. Applications are handled in order of receipt.

Free IT platform check

Frequently asked questions

Does p=none ensure Gmail accepts mail?

No. p=none does not prevent Gmail filtering or rejection. Check authentication and alignment on actual messages.

Does an SPF pass mean DMARC passes?

Not necessarily. SPF or DKIM must pass and align with the From domain.

Does every sending service need DKIM setup?

Each sending service signs its own DKIM. An unsigned service has no DKIM and cannot borrow another service’s signature.

Does using a Microsoft 365 address mean the website uses Microsoft 365?

Not necessarily. Check the website’s actual sending service and message headers.

References