HomeMailThe sender hasn’t authenticated this message so Gmail can’t verify that it actually came from them.

The sender hasn’t authenticated this message so Gmail can’t verify that it actually came from them.

Have you received the emails in SPAM after setting up the GSuite account? It may be a message like “The sender hasn’t authenticated this message so Gmail can’t verify that it actually came from them. Avoid clicking links, downloading attachments, or replying with personal information.” shown in your mail to refer to why it is mentioned as spam.
Don’t worry, we have got you and can solve it in just simple steps.

You can solve it by just adding the records SPF, DKIM, and DMARC record on the domain/hosting DNS control panel to solve the issue.

Adding SPF Record (Sender Policy Framework)

Purpose: SPF helps to prevent spammers from sending emails on behalf of your domain.

Steps to Set Up SPF:

  1. Log in to your DNS management console.
  2. Create a new TXT record.
  3. Set the name to your domain.
  4. Add the following value
v=spf1 include:_spf.google.com ~all
  1. Save the record.

Please ensure that your domain has only one SPF record. If an SPF record already exists, update it to include the necessary information instead of creating a new record.

Example:

Existing SPF record: v=spf1 include:_spf.example.com ~all
New SPF information to add: include:_spf.google.com
Updated SPF record: v=spf1 include:_spf.example.com include:_spf.google.com ~all

DKIM Record (DomainKeys Identified Mail) Creation

Purpose: DKIM adds a digital signature to your emails, which helps verify that the email hasn’t been altered.

Steps to Set Up DKIM:

  1. Log in to your a DKIM Record Generator such as EASYDMARC >> https://easydmarc.com/tools/dkim-record-generator
  2. In the domain field, enter your domain.
  3. Choose selector as “google”.
  4. Choose a key length of your choice in the Key Length field.
  5. Click “Generate” button after giving these inputs.
  6. Copy the TXT record generated by Easydmarc and add it to your domain DNS control panel.
  7. In your DNS, the name will be google._domainkey.yourdomain.com. Replace the yourdomain.com with the domain of yours in the name. And paste the generated key into the value field.
  8. Save the record.

DMARC (Domain-based Message Authentication, Reporting & Conformance):

Purpose: DMARC ensures that both SPF and DKIM are used to protect your email domain.

Steps to Set Up DMARC:

  1. EasyDMARC also has the facility to generate DMARC records for your domain.
  2. Just go to EasyDMARC’s DMARC Record Generator and fill in the following fields:
  • Domain: Your domain name (e.g., example.com).
  • Policy type: The action to take if an email fails DMARC (none, quarantine, or reject).
  • Aggregate reports send to: The email address where aggregate reports should be sent.
  • Failure reports send to: The email address where detailed failure reports should be sent.
  1. Click on “Generate” button after entering all the fields.
  2. Copy the DMARC record generated and add as a TXT record to your domain DNS control panel.
  3. Here the name of the record will b _dmarc.yourdomain.com and the value will be the one you copied. Replace the yourdomain.com with the domain of yours in the name.
  4. Save the record.

When testing email deliverability, avoid common spam triggers such as using terms like "Testing" or "Test" in your subject lines or email body, as these can be flagged by spam filters. Instead, follow best practices: use a legitimate subject line that resembles typical email content, ensure the body of the email has meaningful content, and personalize the email if possible.

By setting up SPF, DKIM, and DMARC records, and following best practices for email content, you can resolve the error message: “The sender hasn’t authenticated this message so Gmail can’t verify that it actually came from them. Avoid clicking links, downloading attachments, or replying with personal information.” and ensure proper authentication. This will improve your email deliverability and ensure that recipients can trust the emails they receive from your domain.

Scroll to Top