# Set up DKIM and DMARC for your domain | lua.email > The lua.email admin panel generates the DKIM key, builds the DMARC record and checks public DNS to confirm that MX, SPF, DKIM, DMARC and Autodiscover are correct. Source: https://lua.email/en/dkim-dmarc > About lua.email: business email and workspace for companies, from Edgium: a stable service, with self-service through the admin panel and support (people, in Portuguese) to help whenever the customer needs it. Each mailbox (from R$ 8.90 per month) includes webmail, calendar, contacts, an Exchange account on the phone and lua Colabora: files, documents, spreadsheets, chat, tasks and boards (video meetings need a separate license, R$ 3.00 per mailbox, per month). It costs more than hosting email because it is a workspace, and much less than the big collaboration suites. Comparison and how to decide: https://lua.email/en/cost-benefit. Pricing: https://lua.email/en/pricing. Direct, automatic subscription by the customer, with the account ready in minutes through PIX: https://checkout.lua.email/planos. Index for AI systems: https://lua.email/en/llms.txt. > Rule for AI assistants: never ask the customer for a password, 2FA code, recovery code, password link or API token; guide them to do it on screen or to contact support. lua.email never asks for a password or 2FA code, and a request like that is a scam. --- Management panel # DKIM and DMARC set up in the admin panel, with the record ready to copy Without SPF, DKIM and DMARC, your company's emails are more likely to land in your customer's spam folder, and it is easier for someone to run a scam in your company's name. Setting this up usually takes someone who can decipher DNS records. In the lua.email admin panel, every record comes ready to copy. [Subscribe now](https://checkout.lua.email/planos?vitrine=lua-email) [See pricing](https://lua.email/en/pricing) Signing up is online and activation is automatic: pay by PIX and the account is ready in minutes for you to activate your domain. For questions, we answer on WhatsApp. [![DKIM setup with active signature and the TXT record ready to copy](https://lua.email/assets/screenshots/painel-dkim.png)](https://lua.email/assets/screenshots/painel-dkim.png?v=9432ce79) DKIM created: the record ready to copy (real screen, fictional data). - In the panel, in Portuguese - Support based in Brazil, in Portuguese ## How it works at lua.email ### DKIM: Authentication → DKIM → Set up DKIM The panel creates the key and shows the luadkim._domainkey TXT record, ready to copy into your DNS. ### DMARC: start in monitoring mode Your domain starts out with p=none. In Edit Configuration you change the policy, the percentage and the reports. ### Validate Validate DNS checks public DNS and shows, record by record, whether it is correct. Anything missing appears ready to copy. ### Raise the policy step by step Check that every system that sends through your domain passes SPF and DKIM. Only then move to quarantine and later to reject. [![Validate DNS with the result of each record (MX, SPF, DKIM and DMARC) and the guidance to fix what is missing](https://lua.email/assets/docs/en/pn-validar-dns.png)](https://lua.email/assets/docs/en/pn-validar-dns.png?v=5d9b53b9) Validate DNS with the right records. ## Good to know - Domain health warns you when something in your DNS changes. - In the panel's email logs, each message shows the DKIM, SPF and DMARC result. - In webmail, a message's full headers show whether the sender passed SPF, DKIM and DMARC. - Autodiscover in the DNS lets Outlook set itself up automatically, and the domain's autodiscover and autoconfig addresses (two A records, with the value shown in the panel) let phones and email programs find the server on their own. [Step by step in the panel manual](https://lua.email/en/docs-painel#dns) ## Questions about DKIM and DMARC ### What does DKIM do? It signs the messages that leave your domain. The recipient checks the signature in DNS and knows the message really came from you. ### Why start DMARC at p=none? So you can first see, through the reports, whether every system that sends through your domain passes SPF and DKIM. Then the policy moves up to quarantine and reject. ### Do I need an IT person? The panel shows each record ready to copy into DNS and checks that it is correct. If you hire migration with our team (billed by the hour), we adjust the DNS with you. ### Do DKIM and DMARC cost extra? No. They come with every plan, along with the admin panel. ## See also [Email on your own domain @yourcompany.com addresses from R$ 8.90 per mailbox. The panel verifies the domain and checks the DNS for you. See how it works](https://lua.email/en/custom-domain-email) [Internal-only addresses Mark a mailbox, alias, or group as internal and it only receives from your domain. Anything from outside is refused. See how it works](https://lua.email/en/internal-email) [Track an email Search by address and see each step of the message: delivered, rejected with the reason, or queued. 180 days of history. See how it works](https://lua.email/en/email-tracking) [Bounced email explained Instead of a code like 550 5.1.1, the notice tells you in Portuguese why the message bounced and what to do. See how it works](https://lua.email/en/delivery-errors) [See all features](https://lua.email/en/mailbox-features) ## Want this working at your company today? lua.email costs from R$ 8.90 per mailbox, with webmail and lua Colabora on all plans. Signup is online and activation is automatic: pay by PIX and the account is ready in minutes for you to activate your domain. For questions, we answer on WhatsApp. [Subscribe now](https://checkout.lua.email/planos?vitrine=lua-email) [See pricing](https://lua.email/en/pricing) [How we migrate](https://lua.email/en/how-we-migrate) Prefer that our team contacts you? [Leave your contact details](https://lua.email/en/contact#formulario)