Skip to content

Domain security

A domain's email security rests on three fronts:

  1. Domain authentication — SPF, DKIM and DMARC tell the rest of the Internet who may send on behalf of your domain and protect against forged messages. See SPF, DKIM and DMARC. Check the status with Test DNS records, on the domain's page in the console.
  2. Passwords — complexity rules and periodic rotation. See Password policies.
  3. Users — phishing awareness and least privilege. See Recognising phishing and fraud and Quotas and permissions.

Checklist

  • MX, SPF, DKIM and DMARC correct in the console's DNS test.
  • Mailboxes of people who have left the company disabled.
  • Administration privileges only for those who need them.
  • Force password change on for new mailboxes.
  • Recovery contacts filled in.
  • Password rotation set, if company policy requires it.