Educational guidance. Email security is not part of the TireTutor product, and TireTutor does not manage your mailboxes. These pages explain how it works so you can brief the right person.
The three records
The order matters. DMARC acts on the results of SPF and DKIM. A DMARC record with no SPF or DKIM beneath it does nothing.
What goes wrong without them
Nothing warns you. Your mail keeps sending. The damage lands at the other end, where you cannot see it.Someone can send email that looks like yours
This is the worst case, and it is not about your mail. A stranger sends a message from your shop address. It tells a customer or a supplier to pay a new bank account. The recipient has nothing to check it against.Suppliers stop receiving your mail
Large companies refuse mail that fails these checks. Warranty claims, parts orders, and credit applications are the mail most at risk, because big companies filter hardest. Sometimes you get a bounce. Often you get silence, and both sides think the other never replied.Customer email drifts into spam
Estimates and reminders lose points with every mail provider. The decline is slow, so it looks like a different problem. Customers say they never got the estimate.You cannot find out who is forging you
DMARC reports list every system sending mail in your name. Without them, you cannot tell a forger from a tool your shop forgot about.Who looks after this
Owning a domain splits across separate companies. The company you last paid is often not the one who can help.
Two of them matter here. Your email provider makes the DKIM key. Your DNS host publishes all three records. You usually need both.
Your website company is not your email company, unless they are the same business. Ask about DNS, not about your website. A web host does not set these records up for you.
Where to go next
Checking your setup
Two free checks that show which records you are missing.
Getting the records set up
Find who manages your domain, and what to ask them for.