SPF & DKIM Signatures
SPF and DKIM are two separate strategies used to more properly authenticate the emails we send on your behalf. We strongly recommend you take the time to get both of these set up - your email delivery largely depends on both of them being present.
To get both set up, we need you to set a few DNS records on the domain that we will be sending email from on your behalf.
SPF is short for Sender Policy Framework and basically answers the question "what IP addresses should my legitimate mail be coming from?" for the recipient mail servers. We have a very strict listing of the IP addresses that we send email from, and you'll need to reference our SPF record in your own SPF record.
SPF validation occurs on the recipient end of things (your customers, the people receiving notifications from your status page).
DKIM is short for DomainKeys Identified Mail, and is a way for Statuspage's email delivery partners to validate that you've given us permission to send email on your behalf. We give you multiple DNS records to set for DKIM because we have multiple email providers, and they each need to know that we've been given permission from you. You setting the DNS records is your way of saying "yep, Statuspage is my friend and can send email for me!".
DKIM validation occurs on the originating end of things (our email providers, the people sending the email).
How to set this up in Statuspage
Navigate to Customize page > Customize email tab. Fill in the value for Send from email field. We recommend a format something along the lines of "Company Support <firstname.lastname@example.org>". Optionally, you can also set a separate Reply to email if you need to route responses elsewhere.
Save email customizations, and a new link will appear to get you started with the SPF and DKIM process.
On the DNS Config tab, you'll see several values which you need to set DNS records for.
For more information on the DNS Config screen, check out the Domain Ownership doc.
After you set each DNS record, give it a few minutes to propagate (up to 10 minutes to be safe) then click Check Again.
Once validated, we will start to send authenticated and signed email within 24 hours.