Email Security

Protect your business email with correctly configured domain authentication, encryption and access controls — set up for you from day one.

Email authentication

SPF (Sender Policy Framework)

SPF tells receiving servers which mail servers are authorised to send email for your domain. A correctly configured SPF record prevents spammers from sending mail that appears to come from your domain.

DKIM (DomainKeys Identified Mail)

DKIM adds a cryptographic signature to every email you send, allowing receiving servers to verify the message was genuinely sent from your domain and was not altered in transit.

DMARC (Domain-based Message Authentication, Reporting and Conformance)

DMARC ties SPF and DKIM together and tells receiving servers what to do with messages that fail authentication — quarantine them, reject them, or let them through. DMARC also provides reporting so you can see who is sending mail as your domain.

Why authentication matters

  • Prevents your domain from being spoofed in phishing attacks
  • Improves email deliverability — authenticated mail is more likely to reach the inbox
  • Builds trust with customers and partners who receive your email
  • Required by major email providers (Google, Microsoft, Yahoo) for reliable delivery

What Droppoint configures

Every domain on Droppoint gets the full authentication stack configured:

  • SPF record authorising Droppoint's mail servers
  • DKIM signing with a 2048-bit key
  • DMARC policy with reporting enabled
  • MTA-STS for enforcing TLS on inbound connections
  • TLS-RPT for transport encryption reporting

Beyond authentication

  • Spam and malware filtering on all inbound mail
  • Two-factor authentication (2FA) on every mailbox
  • Per-mailbox session management and IP access controls
  • Encrypted mail storage and encrypted backups
  • Sending reputation monitoring

Learn more

See our blog articles on SPF, DKIM and DMARC for detailed explanations of how each protocol works.