{"id":674,"date":"2026-04-09T09:46:58","date_gmt":"2026-04-09T09:46:58","guid":{"rendered":"https:\/\/www.hashetools.com\/blog\/?p=674"},"modified":"2026-04-09T09:49:08","modified_gmt":"2026-04-09T09:49:08","slug":"spf-dkim-dmarc-bimi-setup-guide","status":"publish","type":"post","link":"https:\/\/www.hashetools.com\/blog\/spf-dkim-dmarc-bimi-setup-guide\/","title":{"rendered":"SPF, DKIM, DMARC &#038; BIMI: Complete 2026 Setup Guide"},"content":{"rendered":"<p>Google, Yahoo, and Microsoft now enforce email authentication for bulk senders. 83.9% of domains still have no DMARC record, making them prime targets for spoofing, phishing, and spam. This step-by-step guide covers every protocol you need: SPF, DKIM, DMARC, and BIMI.<\/p>\n<h2>What is Email Authentication?<\/h2>\n<p>Every time you send an email, receiving mail servers ask a simple question: Is this message really from who it claims to be? Without authentication, anyone can forge your domain in the From: field; this is how most phishing and business email compromise (BEC) attacks work.<\/p>\n<p>Four DNS-based protocols work together to answer that question definitively:<\/p>\n<table>\n<thead>\n<tr>\n<th><b>Protocol<\/b><\/th>\n<th><b>What It Does<\/b><\/th>\n<th><b>Where It Checks<\/b><\/th>\n<th><b>Enforced By<\/b><\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>SPF<\/td>\n<td>Lists authorized sending IPs for your domain<\/td>\n<td>Return-Path \/ envelope<\/td>\n<td>Receiving mail server<\/td>\n<\/tr>\n<tr>\n<td>DKIM<\/td>\n<td>Cryptographically signs every outgoing message<\/td>\n<td>DKIM-Signature header<\/td>\n<td>Receiving mail server<\/td>\n<\/tr>\n<tr>\n<td>DMARC<\/td>\n<td>Ties SPF\/DKIM to visible From: domain + reports<\/td>\n<td>From: header alignment<\/td>\n<td>Inbox providers (Gmail, etc.)<\/td>\n<\/tr>\n<tr>\n<td>BIMI<\/td>\n<td>Displays your brand logo in the inbox<\/td>\n<td>BIMI DNS record + VMC<\/td>\n<td>Gmail, Yahoo, Apple Mail<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>Think of these as a <b>security stack<\/b>: SPF and DKIM authenticate the message, DMARC enforces a policy when they fail, and BIMI is the trust signal that rewards you for doing it right.<\/p>\n<p><b>2026 Enforcement Update: <\/b>Google &amp; Yahoo require SPF + DKIM + DMARC for all senders of 5,000+ emails\/day. Microsoft enforced similar rules from early 2025. Non-compliant messages are rejected at the SMTP level, not just filtered to spam.<\/p>\n<h2>SPF: Sender Policy Framework<\/h2>\n<h3>What is SPF?<\/h3>\n<p>SPF is a DNS TXT record that publishes a list of <a href=\"https:\/\/www.hashetools.com\/tools\/ip-lookup\">IP addresses<\/a> and servers authorized to send email on behalf of your domain. When a message arrives, the receiving server checks the sender&#8217;s IP against your SPF record. If the IP isn&#8217;t on the list, SPF fails.<\/p>\n<p><b>Important limitation: <\/b>SPF only checks the Return-Path \/ envelope sender, not the visible From: address your recipient sees. That&#8217;s why SPF alone doesn&#8217;t prevent spoofing. You need DMARC for full alignment.<\/p>\n<h3>How to Write an SPF Record<\/h3>\n<p>SPF records are DNS TXT records published on your root domain. Here&#8217;s the anatomy:<\/p>\n<table>\n<tbody>\n<tr>\n<td><b>DNS TXT record: @\u00a0 (your root domain)<\/b><\/td>\n<\/tr>\n<tr>\n<td>v=spf1 include:_spf.google.com include:sendgrid.net ip4:203.0.113.10 -all<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>&nbsp;<\/p>\n<table>\n<thead>\n<tr>\n<th><b>Mechanism<\/b><\/th>\n<th><b>Example<\/b><\/th>\n<th><b>Meaning<\/b><\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>v=spf1<\/td>\n<td>v=spf1<\/td>\n<td>Required, declares this is an SPF record<\/td>\n<\/tr>\n<tr>\n<td>include:<\/td>\n<td>include:_spf.google.com<\/td>\n<td>Authorizes all IPs listed in that domain&#8217;s SPF record<\/td>\n<\/tr>\n<tr>\n<td>ip4:<\/td>\n<td>ip4:203.0.113.10<\/td>\n<td>Authorizes a specific IPv4 address or CIDR range<\/td>\n<\/tr>\n<tr>\n<td>ip6:<\/td>\n<td>ip6:2001:db8::\/32<\/td>\n<td>Authorizes a specific IPv6 address or range<\/td>\n<\/tr>\n<tr>\n<td>a<\/td>\n<td>a:mail.example.com<\/td>\n<td>Authorizes the A record IP of the given domain<\/td>\n<\/tr>\n<tr>\n<td>mx<\/td>\n<td>mx<\/td>\n<td>Authorizes the MX record IPs of your domain<\/td>\n<\/tr>\n<tr>\n<td>-all<\/td>\n<td>-all<\/td>\n<td>FAIL, reject all senders not listed (recommended)<\/td>\n<\/tr>\n<tr>\n<td>~all<\/td>\n<td>~all<\/td>\n<td>SOFTFAIL, mark suspicious but deliver (use while testing)<\/td>\n<\/tr>\n<tr>\n<td>?all<\/td>\n<td>?all<\/td>\n<td>NEUTRAL, no policy (avoid in production)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>SPF Setup Step-by-Step<\/h3>\n<ol>\n<li>Log in to your DNS provider (Cloudflare, GoDaddy, Route 53, Namecheap, etc.)<\/li>\n<li>Create a new TXT record on your root domain (@)<\/li>\n<li>Set the value to: v=spf1 [your sending sources] -all<\/li>\n<li>List every service that sends email as your domain (your mail server, email marketing platform, CRM, support desk, etc.)<\/li>\n<li>Save and wait for DNS propagation (up to 48 hours)<\/li>\n<li>Verify using the HasheTools SPF Lookup tool<\/li>\n<\/ol>\n<p><b>The 10-Lookup Limit: <\/b>SPF records may not trigger more than 10 DNS lookups during evaluation. Each &#8216;include:&#8217; counts as one lookup, and those includes often have their own includes. If you exceed 10, SPF fails with a PermError. Use SPF flattening tools to consolidate if needed.<\/p>\n<p><b>Read Also:<\/b> <a href=\"https:\/\/www.hashetools.com\/blog\/ns1-dns-parking-com-guide\/\">DNS Records for ns1.dns-parking.com<\/a><\/p>\n<h3>Common SPF Record Examples<\/h3>\n<p><b>Google Workspace users:<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><b>DNS TXT: @<\/b><\/td>\n<\/tr>\n<tr>\n<td>v=spf1 include:_spf.google.com ~all<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><b>Microsoft 365 users:<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><b>DNS TXT: @<\/b><\/td>\n<\/tr>\n<tr>\n<td>v=spf1 include:spf.protection.outlook.com ~all<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><b>Google Workspace + Mailchimp + custom mail server:<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><b>DNS TXT: @<\/b><\/td>\n<\/tr>\n<tr>\n<td>v=spf1 include:_spf.google.com include:servers.mcsv.net ip4:203.0.113.10 -all<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>DKIM: DomainKeys Identified Mail<\/h2>\n<h3>What is DKIM?<\/h3>\n<p><a href=\"https:\/\/www.hashetools.com\/tools\/dkim-lookup\">DKIM<\/a> adds a cryptographic digital signature to every outgoing email. The signature is added to the DKIM-Signature header and is verified by the receiving server using a public key stored in your DNS.<\/p>\n<p>Unlike SPF, DKIM proves that the message content hasn&#8217;t been tampered with in transit. Even if an email passes through a mail relay or forwarding service, the DKIM signature remains valid, making it more resilient than SPF for complex mail flows.<\/p>\n<h3>How DKIM Works<\/h3>\n<ul>\n<li><b>Your mail server <\/b>signs each outgoing email using a private key stored on the server<\/li>\n<li>The signature is added to the DKIM-Signature email header<\/li>\n<li>The receiving server looks up your <b>public key <\/b>from a DNS TXT record at selector._domainkey.yourdomain.com<\/li>\n<li>The public key verifies the signature; if it matches, DKIM passes<\/li>\n<li>If the message was altered in transit, the signature won&#8217;t match, and DKIM fails<\/li>\n<\/ul>\n<h3>Your DKIM DNS Record<\/h3>\n<p>DKIM records follow this format:<\/p>\n<table>\n<tbody>\n<tr>\n<td><b>DNS TXT: selector._domainkey.yourdomain.com<\/b><\/td>\n<\/tr>\n<tr>\n<td>v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA&#8230;<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>&nbsp;<\/p>\n<table>\n<thead>\n<tr>\n<th><b>Field<\/b><\/th>\n<th><b>Meaning<\/b><\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>v=DKIM1<\/td>\n<td>Version, always DKIM1<\/td>\n<\/tr>\n<tr>\n<td>k=rsa<\/td>\n<td>Key type, RSA (default) or ed25519 for modern servers<\/td>\n<\/tr>\n<tr>\n<td>p=&#8230;<\/td>\n<td>The base64-encoded public key, generated by your mail server or email provider<\/td>\n<\/tr>\n<tr>\n<td>selector<\/td>\n<td>A name you choose (e.g, &#8216;google&#8217;, &#8216;mail&#8217;, &#8216;s1&#8217;). Allows multiple DKIM keys per domain.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>DKIM Setup Step-by-Step<\/h3>\n<ol>\n<li><b>Generate your DKIM key pair<\/b> in your email service&#8217;s dashboard (Google Workspace, Microsoft 365, SendGrid, Mailchimp, etc.). They provide the public key and the selector name.<\/li>\n<li>Create a DNS TXT record at selector._domainkey.yourdomain.com and paste in the public key value they provide.<\/li>\n<li>Use <b>2048-bit RSA keys <\/b>(recommended over 1024-bit for security).<\/li>\n<li>Save the <a href=\"https:\/\/www.hashetools.com\/blog\/dns-records-google-com-guide\/\">DNS record<\/a> and wait for propagation.<\/li>\n<li>Verify using the HasheTools DKIM Lookup tool by entering your domain and selector.<\/li>\n<\/ol>\n<p><b>Security Best Practice: Rotate Your DKIM Keys: <\/b>DKIM keys should be rotated every 6\u201312 months. This limits the window of exposure if a private key is ever compromised. Your email provider&#8217;s dashboard usually has a key rotation option. After rotation, update the DNS TXT record with the new public key and retire the old selector.<\/p>\n<p><b>Read Also:<\/b> <a href=\"https:\/\/www.hashetools.com\/blog\/how-to-run-traceroute-tracert\/\">How to Run a Traceroute (tracert) Command<\/a><\/p>\n<h2>DMARC: Domain-based Message Authentication<\/h2>\n<h3>What is DMARC?<\/h3>\n<p><a href=\"https:\/\/www.hashetools.com\/tools\/dmarc-lookup\">DMARC<\/a> (Domain-based Message Authentication, Reporting, and Conformance) is the protocol that ties SPF and DKIM together and actually checks the visible From: address your recipient sees.<\/p>\n<p><b>SPF and DKIM authenticate the message, DMARC enforces alignment. <\/b>It tells receiving servers: if this message fails authentication, here&#8217;s what to do with it. And it sends you reports about every email sent from your domain, so you can see who&#8217;s using it.<\/p>\n<h3>DMARC Alignment Explained<\/h3>\n<p>DMARC passes when at least one of these is true:<\/p>\n<ul>\n<li><b>SPF alignment: <\/b>The domain in the Return-Path (envelope sender) matches the visible From: domain<\/li>\n<li><b>DKIM alignment: <\/b>The domain in the DKIM signature (d= tag) matches the visible From: domain<\/li>\n<\/ul>\n<h3>DMARC Record Structure<\/h3>\n<table>\n<tbody>\n<tr>\n<td><b>DNS TXT: _dmarc.yourdomain.com<\/b><\/td>\n<\/tr>\n<tr>\n<td>v=DMARC1; p=reject; rua=mailto:dmarc-reports@yourdomain.com; ruf=mailto:forensic@yourdomain.com; pct=100; adkim=s; aspf=s<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>&nbsp;<\/p>\n<table>\n<thead>\n<tr>\n<th><b>Tag<\/b><\/th>\n<th><b>Example<\/b><\/th>\n<th><b>Meaning<\/b><\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>v=DMARC1<\/td>\n<td>v=DMARC1<\/td>\n<td>Required, declares this is a DMARC record<\/td>\n<\/tr>\n<tr>\n<td>p=<\/td>\n<td>p=none \/ quarantine \/ reject<\/td>\n<td>Policy: what to do with messages that fail DMARC<\/td>\n<\/tr>\n<tr>\n<td>rua=<\/td>\n<td>rua=mailto:reports@domain.com<\/td>\n<td>Address for aggregate XML reports (daily summaries)<\/td>\n<\/tr>\n<tr>\n<td>ruf=<\/td>\n<td>ruf=mailto:forensic@domain.com<\/td>\n<td>Address for forensic\/failure reports (per-message)<\/td>\n<\/tr>\n<tr>\n<td>pct=<\/td>\n<td>pct=100<\/td>\n<td>Percentage of failing mail the policy applies to (100 = all)<\/td>\n<\/tr>\n<tr>\n<td>adkim=<\/td>\n<td>adkim=r or adkim=s<\/td>\n<td>DKIM alignment: r = relaxed (default), s = strict<\/td>\n<\/tr>\n<tr>\n<td>aspf=<\/td>\n<td>aspf=r or aspf=s<\/td>\n<td>SPF alignment: r = relaxed (default), s = strict<\/td>\n<\/tr>\n<tr>\n<td>sp=<\/td>\n<td>sp=reject<\/td>\n<td>Policy for subdomains (if different from main domain)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>DMARC Policy Escalation: The Right Path<\/h3>\n<p>Never jump straight to p=reject. Follow this phased approach:<\/p>\n<table>\n<tbody>\n<tr>\n<td><b>Phase<\/b><\/td>\n<td><b>DMARC Record<\/b><\/td>\n<td><b>What Happens \/ When to Move On<\/b><\/td>\n<\/tr>\n<tr>\n<td><b>Phase 1 (Weeks 1\u20134)<\/b><\/td>\n<td>p=none<\/td>\n<td>Monitor mode. Emails are delivered normally. Collect aggregate reports. Identify all sending sources. Move on when you understand your mail flow.<\/td>\n<\/tr>\n<tr>\n<td><b>Phase 2 (Weeks 5\u20138)<\/b><\/td>\n<td>p=quarantine; pct=25<\/td>\n<td>25% of failing mail goes to spam. Gradually increase pct to 50 \u2192 100 over 2\u20134 weeks. Move on when legitimate mail passes consistently.<\/td>\n<\/tr>\n<tr>\n<td><b>Phase 3 (Weeks 9\u201312)<\/b><\/td>\n<td>p=quarantine; pct=100<\/td>\n<td>All failing mail goes to spam. Monitor for 1\u20132 weeks. If no legitimate mail is affected, escalate.<\/td>\n<\/tr>\n<tr>\n<td><b>Phase 4 (Final)<\/b><\/td>\n<td>p=reject; pct=100<\/td>\n<td>Full enforcement. Failing mail is rejected at the SMTP level. Add sp=reject for subdomain coverage. You&#8217;re protected.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><b>Reading DMARC Aggregate Reports: <\/b>DMARC sends you daily XML reports (rua) showing every IP address that sent email as your domain, how many messages passed or failed SPF\/DKIM, and from which countries. Tools like HasheTools DMARC Lookup, or dedicated platforms like Postmark, EasyDMARC, or dmarcian, parse these into readable dashboards.<\/p>\n<p><b>Read Also:<\/b> <a href=\"https:\/\/www.hashetools.com\/blog\/dns-ptr-record-guide\/\">What Is a DNS PTR Record?<\/a><\/p>\n<h2>BIMI: Brand Indicators for Message Identification<\/h2>\n<h3>What is BIMI?<\/h3>\n<p><a href=\"https:\/\/www.hashetools.com\/tools\/bimi-lookup\">BIMI<\/a> is the reward for doing email authentication right. Once your domain reaches DMARC enforcement (p=quarantine or p=reject), you can publish a BIMI DNS record that tells supporting inbox providers to display your brand logo next to your emails.<\/p>\n<p>Supported by Gmail, Yahoo Mail, Apple Mail, Fastmail, and Cloudmark, BIMI gives your emails a verified checkmark-style visual trust signal before the recipient even opens them.<\/p>\n<h3>BIMI Requirements<\/h3>\n<ul>\n<li><b>DMARC enforcement: <\/b>p=quarantine or p=reject with pct=100, p=none does not qualify<\/li>\n<li><b>SVG logo: <\/b>Your brand logo in SVG Tiny PS format, hosted at a stable HTTPS URL<\/li>\n<li><b>VMC (Verified Mark Certificate): <\/b>Required by Gmail and Apple Mail. Optional for Yahoo, Fastmail. A VMC is issued by DigiCert or Entrust and validates your logo against your trademarked brand.<\/li>\n<\/ul>\n<h3>BIMI Record Structure<\/h3>\n<table>\n<tbody>\n<tr>\n<td><b>DNS TXT: default._bimi.yourdomain.com<\/b><\/td>\n<\/tr>\n<tr>\n<td>v=BIMI1; l=https:\/\/yourdomain.com\/logo.svg; a=https:\/\/yourdomain.com\/vmc.pem<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>&nbsp;<\/p>\n<table>\n<thead>\n<tr>\n<th><b>Tag<\/b><\/th>\n<th><b>Meaning<\/b><\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>v=BIMI1<\/td>\n<td>Required, version tag<\/td>\n<\/tr>\n<tr>\n<td>l=<\/td>\n<td>URL to your SVG Tiny PS logo (must be HTTPS, correct MIME type: image\/svg+xml)<\/td>\n<\/tr>\n<tr>\n<td>a=<\/td>\n<td>URL to your Verified Mark Certificate (.pem file), required for Gmail\/Apple Mail<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h3>BIMI Setup Step-by-Step<\/h3>\n<ol>\n<li><b>Reach DMARC p=reject <\/b>with consistent pass rates above 98%, BIMI is the final reward, not a shortcut<\/li>\n<li><b>Prepare your SVG logo <\/b>in SVG Tiny PS format (specific SVG subset, use tools like Adobe Illustrator or Inkscape with the SVG Tiny PS export profile)<\/li>\n<li><b>Host the SVG <\/b>at a permanent HTTPS URL with Content-Type: image\/svg+xml. Redirects and authentication will cause failures.<\/li>\n<li><b>Obtain a VMC <\/b>from DigiCert (digicert.com) or Entrust if you want Gmail support. Requires a registered trademark.<\/li>\n<li><b>Publish the BIMI TXT record <\/b>at default._bimi.yourdomain.com<\/li>\n<li><b>Verify <\/b>using the HasheTools BIMI Lookup tool<\/li>\n<\/ol>\n<p><b>No Trademark? No VMC? Start with Yahoo. <\/b>Yahoo Mail supports BIMI without a Verified Mark Certificate, provided your domain has sufficient sending reputation. If you don&#8217;t have a registered trademark yet, you can still benefit from BIMI in Yahoo inboxes while pursuing VMC for Gmail support.<\/p>\n<h2>Complete DNS Records Cheat Sheet<\/h2>\n<p>Here is a complete summary of <a href=\"https:\/\/www.hashetools.com\/tools\/all-records\">all DNS records<\/a> you need to publish, with format and location for each:<\/p>\n<table>\n<tbody>\n<tr>\n<td><b>Record<\/b><\/td>\n<td><b>Name \/ Host<\/b><\/td>\n<td><b>Type<\/b><\/td>\n<td><b>Value \/ Format<\/b><\/td>\n<\/tr>\n<tr>\n<td><b>SPF<\/b><\/td>\n<td>@\u00a0 (root)<\/td>\n<td>TXT<\/td>\n<td>v=spf1 include:your-provider ~all<\/td>\n<\/tr>\n<tr>\n<td><b>DKIM<\/b><\/td>\n<td>selector._domainkey<\/td>\n<td>TXT<\/td>\n<td>v=DKIM1; k=rsa; p=YOUR_PUBLIC_KEY<\/td>\n<\/tr>\n<tr>\n<td><b>DMARC<\/b><\/td>\n<td>_dmarc<\/td>\n<td>TXT<\/td>\n<td>v=DMARC1; p=reject; rua=mailto:you@domain.com<\/td>\n<\/tr>\n<tr>\n<td><b>BIMI<\/b><\/td>\n<td>default._bimi<\/td>\n<td>TXT<\/td>\n<td>v=BIMI1; l=https:\/\/domain.com\/logo.svg; a=https:\/\/domain.com\/vmc.pem<\/td>\n<\/tr>\n<tr>\n<td><a href=\"https:\/\/www.hashetools.com\/tools\/mta-sts\">MTA-STS<\/a><\/td>\n<td>_mta-sts<\/td>\n<td>TXT<\/td>\n<td>v=STSv1; id=20260401<\/td>\n<\/tr>\n<tr>\n<td><b>TLS-RPT<\/b><\/td>\n<td>_smtp._tls<\/td>\n<td>TXT<\/td>\n<td>v=TLSRPTv1; rua=mailto:tls-reports@domain.com<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Troubleshooting Common Errors<\/h2>\n<h3>SPF Errors<\/h3>\n<p><b>PermError: too many DNS lookups<\/b><\/p>\n<p>Cause: More than 10 include: directives (counting nested lookups). Fix: Use SPF flattening to replace include: with direct IP4: ranges. Or reduce the number of sending services you authorize.<\/p>\n<p><b>SPF Fails for Forwarded Emails<\/b><\/p>\n<p>Cause: Email forwarding changes the envelope sender, breaking SPF alignment. Fix: This is expected behavior. DKIM survives forwarding, make sure DKIM is configured, and DMARC allows DKIM-only alignment.<\/p>\n<p><b>SPF Record Not Found<\/b><\/p>\n<p>Cause: The TXT record hasn&#8217;t propagated yet, or was published on the wrong host. Fix: Wait up to 48 hours. Verify you published on @ (root domain), not a subdomain.<\/p>\n<h3>DKIM Errors<\/h3>\n<p><b>DKIM Signature Verification Failed<\/b><\/p>\n<p>Cause: Message body was modified in transit (by a mailing list, forwarding service, or anti-virus scanner). Fix: Ensure your mail server doesn&#8217;t modify messages after signing. Consider using l= tag to sign only part of the body.<\/p>\n<p><b>No DKIM Signature Found<\/b><\/p>\n<p>Cause: Your mail server isn&#8217;t signing outgoing messages. Fix: Check your email provider&#8217;s settings and ensure the DKIM signing option is enabled for your domain.<\/p>\n<h3>DMARC Errors<\/h3>\n<p><b>DMARC Fails Despite SPF and DKIM Passing<\/b><\/p>\n<p>Cause: Alignment failure. SPF or DKIM pass, but the authenticated domain doesn&#8217;t match the visible From: domain. Fix: Ensure the d= tag in your DKIM signature matches your From: domain exactly. Use relaxed alignment (adkim=r) if using subdomains.<\/p>\n<p><b>Legitimate Email Going to Spam After p=reject<\/b><\/p>\n<p>Cause: A sending service (newsletter tool, CRM, support desk) isn&#8217;t aligned. Fix: Go back to p=none, review your DMARC aggregate reports, find the unauthorized source, and add it to your SPF record and configure DKIM signing through that service.<\/p>\n<h3>BIMI Errors<\/h3>\n<p><b>Logo Not Displaying in Gmail<\/b><\/p>\n<p>Cause: No VMC, DMARC not in enforcement, or SVG format issues. Fix: Ensure DMARC is p=quarantine or p=reject. Get a VMC from DigiCert or Entrust. Validate SVG is in SVG Tiny PS format and hosted at an HTTPS URL with the correct MIME type.<\/p>\n<h2>Frequently Asked Questions<\/h2>\n<h3>Do I need all four protocols (SPF, DKIM, DMARC, BIMI)?<\/h3>\n<p>For basic email security, SPF + DKIM + DMARC are essential. BIMI is optional but increasingly valuable for brand trust. Google and Yahoo require at least SPF + DKIM + DMARC for bulk senders. We recommend implementing all four in sequence.<\/p>\n<h3>How long does DNS propagation take?<\/h3>\n<p>Changes typically propagate globally within 15 minutes to 48 hours, depending on your TTL settings. Use <a href=\"https:\/\/www.hashetools.com\/\">HasheTools<\/a> DNS Lookup to check live propagation status from multiple global resolvers.<\/p>\n<h3>Will p=reject break legitimate email?<\/h3>\n<p>Only if some of your sending services aren&#8217;t properly authenticated. That&#8217;s why the phased approach (starting at p=none) is critical. Never jump to reject without reviewing your DMARC reports first.<\/p>\n<h3>Can I have multiple DKIM keys?<\/h3>\n<p>Yes. Each DKIM key is identified by a selector prefix (e.g., google._domainkey, sendgrid._domainkey). You can have as many selectors as needed, one per sending service.<\/p>\n<h3>Does SPF protect against spoofing?<\/h3>\n<p>SPF alone does not prevent display-name spoofing (the visible From: address). SPF only checks the envelope sender. You need DMARC to enforce alignment between the envelope sender and the visible From: domain.<\/p>\n<h3>What is the difference between rua and ruf DMARC tags?<\/h3>\n<p>rua receives daily aggregate reports (XML summaries of all mail sources). Ruf receives forensic\/failure reports (copies of individual messages that failed DMARC). RUF reports are more privacy-sensitive and not supported by all receivers.<\/p>\n<h3>Do subdomains inherit DMARC policy?<\/h3>\n<p>By default, the parent domain policy applies to subdomains. Use the sp= tag to set a separate subdomain policy (e.g., sp=reject). Subdomains used for sending also need their own SPF and DKIM records.<\/p>\n<h2>Conclusion<\/h2>\n<p>Email authentication is no longer optional; it\u2019s a requirement. With Google, Yahoo, and Microsoft enforcing strict rules, domains without proper authentication are not just at risk of landing in spam; they\u2019re being rejected before they even reach the inbox.<\/p>\n<p><b>The solution is clear:<\/b><\/p>\n<ul>\n<li>SPF verifies who can send emails for your domain<\/li>\n<li>DKIM ensures your messages haven\u2019t been tampered with<\/li>\n<li>DMARC enforces rules and protects your domain from spoofing<\/li>\n<li>BIMI rewards your setup with visible brand trust in the inbox<\/li>\n<\/ul>\n<p>Together, these protocols create a complete email security and trust framework.<\/p>\n<p><b>But the real takeaway is this:<\/b><\/p>\n<p>Start with SPF and DKIM, move to DMARC enforcement, and then unlock BIMI as the final step.<\/p>\n<p>Most domains still haven\u2019t completed this journey, which means implementing it now gives you a massive advantage in deliverability, security, and brand visibility.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Google, Yahoo, and Microsoft now enforce email authentication for bulk senders. 83.9% of domains still have no DMARC record, making them prime targets for spoofing, phishing, and spam. This step-by-step guide covers every protocol you need: SPF, DKIM, DMARC, and BIMI. What is Email Authentication? Every time you send an email, receiving mail servers ask [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":675,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[8],"tags":[],"class_list":["post-674","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dns"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.0 (Yoast SEO v27.4) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>SPF, DKIM, DMARC &amp; BIMI: Email Authentication Setup Guide<\/title>\n<meta name=\"description\" content=\"Learn how to set up SPF, DKIM, DMARC, and BIMI step-by-step. Improve email deliverability, prevent spoofing, and display your logo in Gmail &amp; Yahoo inboxes.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.hashetools.com\/blog\/spf-dkim-dmarc-bimi-setup-guide\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SPF, DKIM, DMARC &amp; BIMI: Complete 2026 Setup Guide\" \/>\n<meta property=\"og:description\" content=\"Learn how to set up SPF, DKIM, DMARC, and BIMI step-by-step. Improve email deliverability, prevent spoofing, and display your logo in Gmail &amp; Yahoo inboxes.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.hashetools.com\/blog\/spf-dkim-dmarc-bimi-setup-guide\/\" \/>\n<meta property=\"og:site_name\" content=\"Hashe Tools Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-04-09T09:46:58+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-09T09:49:08+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.hashetools.com\/blog\/wp-content\/uploads\/2026\/04\/SPF-DKIM-DMARC-BIMI-Complete-Email-Authentication-Guide-2026.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1280\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"12 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/spf-dkim-dmarc-bimi-setup-guide\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/spf-dkim-dmarc-bimi-setup-guide\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/#\\\/schema\\\/person\\\/00e0e128ebbd938f610f4a5f68c7bc09\"},\"headline\":\"SPF, DKIM, DMARC &#038; BIMI: Complete 2026 Setup Guide\",\"datePublished\":\"2026-04-09T09:46:58+00:00\",\"dateModified\":\"2026-04-09T09:49:08+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/spf-dkim-dmarc-bimi-setup-guide\\\/\"},\"wordCount\":2622,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/spf-dkim-dmarc-bimi-setup-guide\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/SPF-DKIM-DMARC-BIMI-Complete-Email-Authentication-Guide-2026.jpg\",\"articleSection\":[\"DNS\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/spf-dkim-dmarc-bimi-setup-guide\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/spf-dkim-dmarc-bimi-setup-guide\\\/\",\"url\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/spf-dkim-dmarc-bimi-setup-guide\\\/\",\"name\":\"SPF, DKIM, DMARC & BIMI: Email Authentication Setup Guide\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/spf-dkim-dmarc-bimi-setup-guide\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/spf-dkim-dmarc-bimi-setup-guide\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/SPF-DKIM-DMARC-BIMI-Complete-Email-Authentication-Guide-2026.jpg\",\"datePublished\":\"2026-04-09T09:46:58+00:00\",\"dateModified\":\"2026-04-09T09:49:08+00:00\",\"description\":\"Learn how to set up SPF, DKIM, DMARC, and BIMI step-by-step. Improve email deliverability, prevent spoofing, and display your logo in Gmail & Yahoo inboxes.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/spf-dkim-dmarc-bimi-setup-guide\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/spf-dkim-dmarc-bimi-setup-guide\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/spf-dkim-dmarc-bimi-setup-guide\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/SPF-DKIM-DMARC-BIMI-Complete-Email-Authentication-Guide-2026.jpg\",\"contentUrl\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/SPF-DKIM-DMARC-BIMI-Complete-Email-Authentication-Guide-2026.jpg\",\"width\":2560,\"height\":1280,\"caption\":\"SPF, DKIM, DMARC, and BIMI email authentication workflow for 2026 inbox security\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/spf-dkim-dmarc-bimi-setup-guide\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SPF, DKIM, DMARC &#038; BIMI: Complete 2026 Setup Guide\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/\",\"name\":\"Hashe Tools Blog\",\"description\":\"Comprehensive suite of DNS, email, web, and network tools.\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/#organization\",\"name\":\"Hashe Tools Blog\",\"url\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/HT-Logo-scaled.png\",\"contentUrl\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/HT-Logo-scaled.png\",\"width\":2560,\"height\":573,\"caption\":\"Hashe Tools Blog\"},\"image\":{\"@id\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/#\\\/schema\\\/person\\\/00e0e128ebbd938f610f4a5f68c7bc09\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/df2bd9c990eadb0545cf0b410ba1807a10f19265fb23cc8ff1cb67870ad409e3?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/df2bd9c990eadb0545cf0b410ba1807a10f19265fb23cc8ff1cb67870ad409e3?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/df2bd9c990eadb0545cf0b410ba1807a10f19265fb23cc8ff1cb67870ad409e3?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\\\/\\\/www.hashetools.com\\\/blog\"],\"url\":\"https:\\\/\\\/www.hashetools.com\\\/blog\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"SPF, DKIM, DMARC & BIMI: Email Authentication Setup Guide","description":"Learn how to set up SPF, DKIM, DMARC, and BIMI step-by-step. Improve email deliverability, prevent spoofing, and display your logo in Gmail & Yahoo inboxes.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.hashetools.com\/blog\/spf-dkim-dmarc-bimi-setup-guide\/","og_locale":"en_US","og_type":"article","og_title":"SPF, DKIM, DMARC & BIMI: Complete 2026 Setup Guide","og_description":"Learn how to set up SPF, DKIM, DMARC, and BIMI step-by-step. Improve email deliverability, prevent spoofing, and display your logo in Gmail & Yahoo inboxes.","og_url":"https:\/\/www.hashetools.com\/blog\/spf-dkim-dmarc-bimi-setup-guide\/","og_site_name":"Hashe Tools Blog","article_published_time":"2026-04-09T09:46:58+00:00","article_modified_time":"2026-04-09T09:49:08+00:00","og_image":[{"width":2560,"height":1280,"url":"https:\/\/www.hashetools.com\/blog\/wp-content\/uploads\/2026\/04\/SPF-DKIM-DMARC-BIMI-Complete-Email-Authentication-Guide-2026.jpg","type":"image\/jpeg"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"12 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.hashetools.com\/blog\/spf-dkim-dmarc-bimi-setup-guide\/#article","isPartOf":{"@id":"https:\/\/www.hashetools.com\/blog\/spf-dkim-dmarc-bimi-setup-guide\/"},"author":{"name":"admin","@id":"https:\/\/www.hashetools.com\/blog\/#\/schema\/person\/00e0e128ebbd938f610f4a5f68c7bc09"},"headline":"SPF, DKIM, DMARC &#038; BIMI: Complete 2026 Setup Guide","datePublished":"2026-04-09T09:46:58+00:00","dateModified":"2026-04-09T09:49:08+00:00","mainEntityOfPage":{"@id":"https:\/\/www.hashetools.com\/blog\/spf-dkim-dmarc-bimi-setup-guide\/"},"wordCount":2622,"commentCount":0,"publisher":{"@id":"https:\/\/www.hashetools.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.hashetools.com\/blog\/spf-dkim-dmarc-bimi-setup-guide\/#primaryimage"},"thumbnailUrl":"https:\/\/www.hashetools.com\/blog\/wp-content\/uploads\/2026\/04\/SPF-DKIM-DMARC-BIMI-Complete-Email-Authentication-Guide-2026.jpg","articleSection":["DNS"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.hashetools.com\/blog\/spf-dkim-dmarc-bimi-setup-guide\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.hashetools.com\/blog\/spf-dkim-dmarc-bimi-setup-guide\/","url":"https:\/\/www.hashetools.com\/blog\/spf-dkim-dmarc-bimi-setup-guide\/","name":"SPF, DKIM, DMARC & BIMI: Email Authentication Setup Guide","isPartOf":{"@id":"https:\/\/www.hashetools.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.hashetools.com\/blog\/spf-dkim-dmarc-bimi-setup-guide\/#primaryimage"},"image":{"@id":"https:\/\/www.hashetools.com\/blog\/spf-dkim-dmarc-bimi-setup-guide\/#primaryimage"},"thumbnailUrl":"https:\/\/www.hashetools.com\/blog\/wp-content\/uploads\/2026\/04\/SPF-DKIM-DMARC-BIMI-Complete-Email-Authentication-Guide-2026.jpg","datePublished":"2026-04-09T09:46:58+00:00","dateModified":"2026-04-09T09:49:08+00:00","description":"Learn how to set up SPF, DKIM, DMARC, and BIMI step-by-step. Improve email deliverability, prevent spoofing, and display your logo in Gmail & Yahoo inboxes.","breadcrumb":{"@id":"https:\/\/www.hashetools.com\/blog\/spf-dkim-dmarc-bimi-setup-guide\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.hashetools.com\/blog\/spf-dkim-dmarc-bimi-setup-guide\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.hashetools.com\/blog\/spf-dkim-dmarc-bimi-setup-guide\/#primaryimage","url":"https:\/\/www.hashetools.com\/blog\/wp-content\/uploads\/2026\/04\/SPF-DKIM-DMARC-BIMI-Complete-Email-Authentication-Guide-2026.jpg","contentUrl":"https:\/\/www.hashetools.com\/blog\/wp-content\/uploads\/2026\/04\/SPF-DKIM-DMARC-BIMI-Complete-Email-Authentication-Guide-2026.jpg","width":2560,"height":1280,"caption":"SPF, DKIM, DMARC, and BIMI email authentication workflow for 2026 inbox security"},{"@type":"BreadcrumbList","@id":"https:\/\/www.hashetools.com\/blog\/spf-dkim-dmarc-bimi-setup-guide\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.hashetools.com\/blog\/"},{"@type":"ListItem","position":2,"name":"SPF, DKIM, DMARC &#038; BIMI: Complete 2026 Setup Guide"}]},{"@type":"WebSite","@id":"https:\/\/www.hashetools.com\/blog\/#website","url":"https:\/\/www.hashetools.com\/blog\/","name":"Hashe Tools Blog","description":"Comprehensive suite of DNS, email, web, and network tools.","publisher":{"@id":"https:\/\/www.hashetools.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.hashetools.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.hashetools.com\/blog\/#organization","name":"Hashe Tools Blog","url":"https:\/\/www.hashetools.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.hashetools.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.hashetools.com\/blog\/wp-content\/uploads\/2025\/11\/HT-Logo-scaled.png","contentUrl":"https:\/\/www.hashetools.com\/blog\/wp-content\/uploads\/2025\/11\/HT-Logo-scaled.png","width":2560,"height":573,"caption":"Hashe Tools Blog"},"image":{"@id":"https:\/\/www.hashetools.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.hashetools.com\/blog\/#\/schema\/person\/00e0e128ebbd938f610f4a5f68c7bc09","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/df2bd9c990eadb0545cf0b410ba1807a10f19265fb23cc8ff1cb67870ad409e3?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/df2bd9c990eadb0545cf0b410ba1807a10f19265fb23cc8ff1cb67870ad409e3?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/df2bd9c990eadb0545cf0b410ba1807a10f19265fb23cc8ff1cb67870ad409e3?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/www.hashetools.com\/blog"],"url":"https:\/\/www.hashetools.com\/blog\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.hashetools.com\/blog\/wp-json\/wp\/v2\/posts\/674","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hashetools.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hashetools.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hashetools.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hashetools.com\/blog\/wp-json\/wp\/v2\/comments?post=674"}],"version-history":[{"count":3,"href":"https:\/\/www.hashetools.com\/blog\/wp-json\/wp\/v2\/posts\/674\/revisions"}],"predecessor-version":[{"id":678,"href":"https:\/\/www.hashetools.com\/blog\/wp-json\/wp\/v2\/posts\/674\/revisions\/678"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.hashetools.com\/blog\/wp-json\/wp\/v2\/media\/675"}],"wp:attachment":[{"href":"https:\/\/www.hashetools.com\/blog\/wp-json\/wp\/v2\/media?parent=674"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hashetools.com\/blog\/wp-json\/wp\/v2\/categories?post=674"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hashetools.com\/blog\/wp-json\/wp\/v2\/tags?post=674"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}