Sender Authorization
Last updated
Last updated
The Sender Authorization function allows you to add domains used for sending emails through our EmailLabs service directly within the panel. This helps secure your account against unauthorized use by third parties.
Moreover, this feature enables the configuration of four DNS records: DKIM, DMARC, Tracking, and Return Path. Adding these records to your domain's DNS settings significantly improves your email deliverability rates. For more information, click here: From Domain Authorization - Configurator
In the Sender Authorization section (Administrator > Sender Authorization), add all the sending domains you plan to use for your mailings. Our system will then generate the necessary records for you to add to your domain's DNS settings. This configuration not only sets up essential authentication protocols but also protects your account from unauthorized sending using unapproved domains.
IMPORTANT: If your account was created before January 30, 2024, please notify our Customer Support at after adding and propagating the DNS entries. After receiving your email, our team will switch your account to the new authorization method.
The new sending domain can be added in the EmailLabs panel in Admin > Sender Authorization tab.
In the EmailLabs panel, you canât authorize your email address. But in the Sender Authorization tab, you can add your sending domain.
(Domain Keys Identified Mail) This record helps protect your domain from spoofing and enables sender authentication. It ensures that sending emails from domains not added in the EmailLabs panel is not possible. Configuring this record is mandatory.
Tracking Subdomain Setting up a subdomain for link tracking allows you to monitor email opens and clicks on links within the email. This provides insights into which emails were opened and when recipients clicked through to the linked content. If you donât need this information, configuring this record is optional.
Return-Path Subdomain Configuring a Return-Path subdomain allows you to create a custom Return-Path header. This aligns the Return-Path domain with the From address domain, which is recommended by providers like Google and Yahoo.
(Domain-based Message Authentication, Reporting & Conformance) This authentication method lets senders specify actions to be taken if an email fails DMARC policy checks. There are three levels of enforcement: one neutral and two strict.
Neutral Policy (p=none): Allows verification of incoming emails against security measures (SPF, DKIM) without further actions.
Strict Policy (p=quarantine or p=reject): DMARC checks incoming emails, and if they fail the security requirements, it either sends them to quarantine (spam folder) or rejects them entirely.
When you see the status âwaitingâ for your domain records in the Sender Authorization tab, your domains were added to the previous authorization method. Please compare the existing records with the new ones and update them. Then please validate them by using the 'check' button.
Add the records generated by the EmailLabs system to your domain's DNS settings in your hosting panel.
The process for adding records to your domain's DNS depends on your hosting system.
Check out our guide for detailed instructions:a From Domain Authorization - Configurator In the left menu, you'll find configuration examples for the most popular hosting systems.
To check the propagation status of your changes, click the 'check' button in the Sender Authorization section for your added domain.
If you click the 'check' button and receive a 'failed' status, it could mean:
The DNS changes are still propagating, which can take up to 24 hours. We recommend checking the status again later by clicking the 'check' button.
The DNS records were added incorrectly - verify that the records are entered according to your hosting providerâs requirements and the EmailLabs instructions.
This message indicates that an email was sent from a domain that isnât authorized in the EmailLabs panel. Please go to the Administrator > Sender Authorization tab and add the appropriate domain.
You can find the configuration instructions here: From Domain Authorization - Configurator
Yes, configuring DKIM authentication is essential for sender authorization to function.
Yes, you can change the DKIM selector to any string or letters and numbers, such as 'plpl'. The maximum length for the selector is 7 characters.
No, if you already have a DMARC record for your domain, you donât need to change it. You can continue using your current one or change it to the one prepared by EmailLabs.
Adding all records generated by the EmailLabs system isnât mandatory. However, we recommend implementing all four records for optimal email deliverability.
You should configure only one for a single sending domain. Adding two DMARC records in your domain's DNS can lead to errors when the receiving server tries to process incoming emails, as they don't know which record to apply. Correct DMARC configurations require a single record per domain.
If your account was created after January 30, 2024, you can now begin sending using your authorized domain. Otherwise, please email . After receiving your inquiry, our team will activate new sender authorization on your account.
If your account was created before January 30, 2024, this function isn't enabled by default. Please email . After receiving your inquiry, our team will activate new sender authorization on your account.