Skip to main content
Since 2024, Gmail and Yahoo require bulk senders to be authenticated: SPF, DKIM and DMARC published for the domain of the sender address. Without them, your e-mails end up in the junk folder or are refused. Settings → Deliverability.
The Deliverability page

The rates of the last thirty days, and the state of a domain's DNS records.

​
The rates of the last thirty days

A card in red is a serious warning: see Sending safety. If the organisation’s postal address is missing, a banner says so: the law asks for one in every marketing e-mail.

​
Add a domain

Add a domain:
​
text
required
The domain of your sender address: dupont-bakery.example for hello@dupont-bakery.example.
​
provider
Amazon SES, Postmark, Mailgun, SendGrid, Brevo or Resend: Lekalao works out the SPF record from it. I will write SPF myself when you go through SMTP or several providers.
​
up to 5
The records your provider gives you when you add the domain there (SES gives three, as CNAMEs; Postmark one, as TXT). Copy the host, the type and the value of each, exactly as they are.
​
subdomain
Optional, click.dupont-bakery.example for example. See below.
​
e-mail
Optional: the address that will receive the aggregated DMARC reports (rua).

​
Publishing the records

The domain appears with the table of records to create at your DNS host, each with a Copy button:
One SPF record per domain, no more. If you already have one (Google Workspace, Microsoft 365…), add the include: to it instead of creating a second: v=spf1 include:_spf.google.com include:amazonses.com ~all.
DMARC starts at p=none: mailboxes send you reports without blocking anything. Once the reports have been clean for a few weeks, move to p=quarantine, then p=reject, at your DNS host.

​
Checking

Lekalao checks every domain every night, and on demand with Check again (DNS takes anything from a few minutes to a few hours to spread). Each record has a state: The domain is Verified when SPF, DKIM and DMARC are in place or not used; otherwise it shows Records missing.

​
The tracking host

By default, tracked links and the open pixel go through your Lekalao’s own address. With a verified tracking host (a CNAME to your Lekalao), they go through your subdomain: your links carry your name, and spam filters do not tie your reputation to other senders’. The first domain you add becomes the default tracking host.

​
A shared installation

When the installation holds several customers (LEKALAO_REQUIRE_VERIFIED_DOMAIN=true), the sender address of campaigns, transactional e-mails and the SMTP relay must belong to a domain the team added and verified. See Installation security.

​
Remove a domain

Remove: e-mails from that domain are no longer checked against its records, and the tracking host is no longer used. Nothing changes in your DNS.