Email Domain Security Warning
Why did I receive a security warning about my email domain?
If you received an email message from FynchAI with a footnote warning that your email domain has "incomplete authentication" or is missing "strict SPF or DKIM records," it means our system could not fully verify that the email actually came from you.
While we still processed your request this time, relying on unauthenticated email is risky and can cause deliverability issues.
What are SPF and DKIM?
Think of SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) as a digital passport and signature for your emails.
SPF tells the world which servers are allowed to send emails on behalf of your company's domain (like
@yourcompany.com).DKIM adds a cryptographic signature to your emails, proving they weren't tampered with while traveling across the internet.
When these are missing or misconfigured, your emails look exactly the same as forged emails sent by spammers or attackers.
Why is this important for Fynch's Email Agent?
Because the FynchAI Email Agent executes tasks and interacts with your data based on the emails it receives, it needs to be 100% certain that an email asking it to perform an action (like summarizing a private document or adding a new collaborator) actually came from you and not an impersonator.
Additionally, without SPF and DKIM configured, emails you send to normal people often end up in their Spam or Junk folders.
How to fix this issue
To resolve this warning, you or your IT administrator will need to update the DNS records for your domain.
Step 1: Contact your IT Department (If applicable). If you have an IT team or a webmaster, simply send them this article and ask them to "Ensure our SPF and DKIM records are strictly configured for our email provider."
Step 2: Fix it yourself (For Admins/Founders) If you manage your own domain, follow these steps:
Log in to your Email Provider (e.g., Google Workspace, Microsoft 365, Zoho) and search their help center for "How to set up SPF and DKIM." They will provide you with specific text values (called
TXTorCNAMErecords).Log in to your DNS Provider (where you bought your domain, e.g., GoDaddy, Namecheap, Cloudflare).
Add the Records provided by your email host into your domain's DNS settings.
Wait for propagation. It can take anywhere from a few minutes to 24 hours for DNS changes to spread across the internet.
Need more help?
Setting up DNS records can be tricky the first time. If you get stuck, we highly recommend checking the official guides from the two most common providers:
Google Workspace: Help prevent spoofing and spam with SPF and DKIM
Microsoft 365: Set up SPF and DKIM to prevent spoofing
If you're still having trouble, feel free to reach out to our support team for guidance!