What is Email Authentication?<\/h2>\n\n\n\n\n\nWhen most people hear about Email Authentication, they think about their email user name and password. However, the Email Authentication<\/em> we are referring to is a little different. Email Authentication<\/em> (or Validation) refers to a number of technologies email operators use to verify the identity of the sending mail server of an email message. The original Simple Mail Transfer Protocol (the set of commands servers use to transfer emails; better known as just SMTP) does not have any such features (it was designed in 1982 after all). <\/p>\n<\/div>\n\n\n\n\nSMTP error messages are very cryptic:<\/strong><\/p>\n\n\n\n550-5.7.1 This message does not have authentication information or fails to pass authentication checks. To best protect our users from spam, the message has been blocked. Please visit
https:\/\/support.google.com\/mail\/answer\/81126#authentication for more information. d16si9512682pgi.148 - gsmtp <\/p>\n\n\n\n
At ICDSoft <\/a><\/strong>we don't expect our customers to understand them. That's why we have 24\/7 Support with 15-minute Response Guarantee.<\/u><\/p>\n<\/div>\n<\/div>\n\n\n\nThere are two main technologies used for Email Authentication:<\/p>\n\n\n\n
- SPF <\/strong>- Sender Policy Framework<\/li>
- DKIM <\/strong>- DomainKeys Identified Mail<\/li><\/ul>\n\n\n\n
<\/p>\n\n\n\n
How does Email Authentication Work?<\/h2>\n\n\n\n
SPF<\/strong> and DKIM<\/strong> use slightly different approaches. They both use DNS<\/strong> records. However, the records give away different information. When a server receives an email, it checks these records. Based on the results, the server can determine if the email was sent by an authenticated server or not.<\/p>\n\n\n\nThe Spam filters we use at ICDSoft <\/a><\/strong>use both of these techniques in order to improve spam recognition and classification.<\/p>\n\n\n\nSPF<\/h3>\n\n\n\n
SPF <\/strong>stands for Sender Policy Framework<\/em>. The SPF DNS record specifies the allowed sending (SMTP<\/strong>) servers for the domain name. When you use SPF<\/strong>, you can list many different SMTP <\/strong>servers without any configuration needed on the SMTP <\/strong>server itself. The final part of the SPF<\/strong> record (~all<\/em>) specifies the way unlisted servers must be treated. In the example record below, \"~all<\/em>\" means \"SOFTFAIL<\/strong>\". Most mail providers will flag this message but not reject it. If you want strict checking, you can use \"-all<\/em>\". Further details about the SPF<\/strong> specification can be found on the Wikipedia page<\/a>:<\/font><\/p>\n\n\n\nSPF records look like this: <\/strong>
v=spf1 a mx include:smtp-spf.someserver.com ~all <\/pre>\n\n\n\nThe SPF Process:<\/h4>\n\n\n\n
Here is how SPF<\/strong> works:<\/p>\n\n\n\n![\"SPF](\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\")
<\/a>SPF Email Authentication in action<\/figcaption><\/figure><\/div>\n\n\n\nSPF<\/strong> works only if the recipient server checks for SPF<\/strong> Email Authentication<\/u>. The check is basic - when the server receives an email, it checks if the sending server's IP address is listed in the SPF DNS <\/strong>record of the sender's domain. Based on the result of this check and the failure policy (~all<\/em>), the server determines if the message should be delivered, rejected, or classified as spam. <\/p>\n\n\n\nDKIM \/ DomainKeys<\/h3>\n\n\n\n\n\nDKIM (<\/strong>DomainKeys Identified Mail<\/em>) uses public key cryptography to sign messages. The downside of this method is that it requires changes to the mail server software, as opposed to SPF<\/strong>, which requires publishing a single DNS <\/strong>record. This requires the cooperation of your email administrator. <\/p>\n\n\n\n<\/p>\n<\/div>\n\n\n\n
\nAt ICDSoft DKIM is available out of the box<\/h2>Use a hosting provider that understands E-mail<\/u><\/p><\/div><\/div>Get Your Account Here >><\/a><\/div><\/div>\n<\/div>\n<\/div>\n\n\n\n\n\nEach authenticated sending server must sign every email they send with a Private Key<\/em>. This Private Key <\/em>has a matching Public Key <\/em>which is published in the DKIM DNS <\/strong>record. Recipient mail servers use this Public Key <\/em>to check if the message was sent from an authenticated server (as only authenticated servers have the correct private key). \n\n<\/p>\n\n\n\nDKIM records look like this: <\/strong>
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDTYf0C\/D2g0vFGjYWb5gzZ2WDnBHiq++iHkCyQ1upCSokENuDAgRfAiWrW1M1Ge6dbZoI5RPzChmKe7PMqZf7fzj0+dvn6VP\/\/r\/+cZd6nmMh65cN\/iwwl7ncP6rngI8B4cfmgPfjU0eY46F511mThvAQ4TLvj7Han5qMZrG5FzwIDAQAB <\/pre>\n\n\n\nThe DKIM Process<\/h4>\n\n\n\n<\/a>DKIM Email Authentication in action<\/figcaption><\/figure><\/div>\n\n\n\nDKIM <\/strong>still relies on the recipient server to check the validity of a message. The receiving server, if it is DKIM <\/strong>enabled, will check the message headers for the message signature and verify it against the Public Key published in the DKIM DNS <\/strong>record. If the message fails, it is up to the recipient server to classify the message accordingly. <\/p>\n\n\n\n<\/p>\n\n\n\n
Why Does Email Get Blocked by Gmail All Of A Sudden?<\/h2>\n\n\n\n
Google is the largest email provider today. Over a billion users use their Gmail and G Suite services. Their spam protection is really tight, but this has drawbacks as well. Many users struggle to get some legitimate emails out of their Spam folders. <\/p>\n\n\n\n
Google recently updated their spam filter and started blocking messages without Email Authentication. We are not aware about any announcement of this change. It caught many Gmail users unprepared and asking for help.<\/p>\n\n\n\n
\n\nWhile the change may be beneficial overall, the power Gmail has over the email system raises concerns. When Gmail makes a change to their policies, all email servers must comply, even if they do not agree with the changes. In this case, however, we think that the measures Google is pushing for are beneficial for all, and we support this change. <\/p>\n<\/div>\n\n\n\n
\nAt ICDSoft <\/strong>You Have Control<\/u><\/h2>Use a Provider That Respects Your Choice<\/p><\/div><\/div>
Get Your Account Here >><\/a><\/div><\/div>\n<\/div>\n<\/div>\n\n\n\nIn 2014, a similar unannounced policy change by another big player (Yahoo) caused millions of mailing lists to stop working. This effectively broke all mailing list communication with these large email providers. You can check more at: Yahoo email anti-spoofing policy breaks mailing lists.<\/a><\/p>\n\n\n\nICDSoft<\/a><\/strong> customers were affected as well, and we immediately applied a patch to our mailing list software which resolved the issue. <\/p>\n\n\n\nHow Do I stop Gmail From Blocking Emails?<\/h2>\n\n\n\n
In short, you simply need to turn on email authentication for your account. Every new ICDSoft<\/a><\/strong> <\/a>customer gets DKIM <\/strong>and SPF <\/strong>enabled by default. Combined with our generous disk space offerings, advanced anti-spam protection and low prices, this makes us a preferable choice for many email users. And we also offer Free Migration<\/strong> with every account (which includes<\/u> Email).<\/p>\n\n\n\nIf you are an existing client, to enable DKIM <\/strong>and SPF<\/strong>, navigate to the DNS Manager<\/strong> in the online Control Panel, and click the \"Enable\" buttons. <\/p>\n\n\n\n<\/a>Enabling email authentication<\/figcaption><\/figure>\n\n\n\nMost other service providers should have a similar easy way to enable support for these two technologies. If such support isn't available, you can use some online SPF<\/strong> and DKIM<\/strong> record generators, like https:\/\/mxtoolbox.com\/SPFRecordGenerator.aspx<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"Google started rejecting messages due to failed authentication checks. Read our article for more information and a solution.<\/p>\n","protected":false},"author":1,"featured_media":4714,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"advgb_blocks_editor_width":"","advgb_blocks_columns_visual_guide":"","footnotes":""},"categories":[6,5],"tags":[],"class_list":{"0":"post-3913","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-security","8":"category-tech"},"author_meta":{"display_name":"ICDSoft","author_link":"https:\/\/www.icdsoft.com\/blog\/author\/icdsoft\/"},"featured_img":"https:\/\/www.icdsoft.com\/blog\/wp-content\/uploads\/2019\/02\/gmail-error-571-300x140.png","featured_image_src":"https:\/\/www.icdsoft.com\/blog\/wp-content\/uploads\/2019\/02\/gmail-error-571.png","featured_image_src_square":"https:\/\/www.icdsoft.com\/blog\/wp-content\/uploads\/2019\/02\/gmail-error-571.png","author_info":{"display_name":"ICDSoft","author_link":"https:\/\/www.icdsoft.com\/blog\/author\/icdsoft\/"},"coauthors":[],"tax_additional":{"categories":{"linked":["Security<\/a>","Technology<\/a>"],"unlinked":["Security<\/span>","Technology<\/span>"]}},"comment_count":"0","relative_dates":{"created":"Posted 7 years ago","modified":"Updated 4 months ago"},"absolute_dates":{"created":"Posted on February 28, 2019","modified":"Updated on March 19, 2026"},"absolute_dates_time":{"created":"Posted on February 28, 2019 9:16 am","modified":"Updated on March 19, 2026 8:15 am"},"featured_img_caption":"Failed email authentication check at Gmail","series_order":"","_links":{"self":[{"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/posts\/3913","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/comments?post=3913"}],"version-history":[{"count":86,"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/posts\/3913\/revisions"}],"predecessor-version":[{"id":14924,"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/posts\/3913\/revisions\/14924"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/media\/4714"}],"wp:attachment":[{"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/media?parent=3913"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/categories?post=3913"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/tags?post=3913"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
When most people hear about Email Authentication, they think about their email user name and password. However, the Email Authentication<\/em> we are referring to is a little different. Email Authentication<\/em> (or Validation) refers to a number of technologies email operators use to verify the identity of the sending mail server of an email message. The original Simple Mail Transfer Protocol (the set of commands servers use to transfer emails; better known as just SMTP) does not have any such features (it was designed in 1982 after all). <\/p>\n<\/div>\n\n\n\n SMTP error messages are very cryptic:<\/strong><\/p>\n\n\n\n 550-5.7.1 This message does not have authentication information or fails to pass authentication checks. To best protect our users from spam, the message has been blocked. Please visit At ICDSoft <\/a><\/strong>we don't expect our customers to understand them. That's why we have 24\/7 Support with 15-minute Response Guarantee.<\/u><\/p>\n<\/div>\n<\/div>\n\n\n\n There are two main technologies used for Email Authentication:<\/p>\n\n\n\n <\/p>\n\n\n\n SPF<\/strong> and DKIM<\/strong> use slightly different approaches. They both use DNS<\/strong> records. However, the records give away different information. When a server receives an email, it checks these records. Based on the results, the server can determine if the email was sent by an authenticated server or not.<\/p>\n\n\n\n The Spam filters we use at ICDSoft <\/a><\/strong>use both of these techniques in order to improve spam recognition and classification.<\/p>\n\n\n\n SPF <\/strong>stands for Sender Policy Framework<\/em>. The SPF DNS record specifies the allowed sending (SMTP<\/strong>) servers for the domain name. When you use SPF<\/strong>, you can list many different SMTP <\/strong>servers without any configuration needed on the SMTP <\/strong>server itself. The final part of the SPF<\/strong> record (~all<\/em>) specifies the way unlisted servers must be treated. In the example record below, \"~all<\/em>\" means \"SOFTFAIL<\/strong>\". Most mail providers will flag this message but not reject it. If you want strict checking, you can use \"-all<\/em>\". Further details about the SPF<\/strong> specification can be found on the Wikipedia page<\/a>:<\/font><\/p>\n\n\n\n Here is how SPF<\/strong> works:<\/p>\n\n\n\n SPF<\/strong> works only if the recipient server checks for SPF<\/strong> Email Authentication<\/u>. The check is basic - when the server receives an email, it checks if the sending server's IP address is listed in the SPF DNS <\/strong>record of the sender's domain. Based on the result of this check and the failure policy (~all<\/em>), the server determines if the message should be delivered, rejected, or classified as spam. <\/p>\n\n\n\n DKIM (<\/strong>DomainKeys Identified Mail<\/em>) uses public key cryptography to sign messages. The downside of this method is that it requires changes to the mail server software, as opposed to SPF<\/strong>, which requires publishing a single DNS <\/strong>record. This requires the cooperation of your email administrator. <\/p>\n\n\n\n <\/p>\n<\/div>\n\n\n\n Use a hosting provider that understands E-mail<\/u><\/p><\/div><\/div> \n\nEach authenticated sending server must sign every email they send with a Private Key<\/em>. This Private Key <\/em>has a matching Public Key <\/em>which is published in the DKIM DNS <\/strong>record. Recipient mail servers use this Public Key <\/em>to check if the message was sent from an authenticated server (as only authenticated servers have the correct private key). \n\n<\/p>\n\n\n\n DKIM <\/strong>still relies on the recipient server to check the validity of a message. The receiving server, if it is DKIM <\/strong>enabled, will check the message headers for the message signature and verify it against the Public Key published in the DKIM DNS <\/strong>record. If the message fails, it is up to the recipient server to classify the message accordingly. <\/p>\n\n\n\n <\/p>\n\n\n\n Google is the largest email provider today. Over a billion users use their Gmail and G Suite services. Their spam protection is really tight, but this has drawbacks as well. Many users struggle to get some legitimate emails out of their Spam folders. <\/p>\n\n\n\n Google recently updated their spam filter and started blocking messages without Email Authentication. We are not aware about any announcement of this change. It caught many Gmail users unprepared and asking for help.<\/p>\n\n\n\n While the change may be beneficial overall, the power Gmail has over the email system raises concerns. When Gmail makes a change to their policies, all email servers must comply, even if they do not agree with the changes. In this case, however, we think that the measures Google is pushing for are beneficial for all, and we support this change. <\/p>\n<\/div>\n\n\n\n Use a Provider That Respects Your Choice<\/p><\/div><\/div> In 2014, a similar unannounced policy change by another big player (Yahoo) caused millions of mailing lists to stop working. This effectively broke all mailing list communication with these large email providers. You can check more at: Yahoo email anti-spoofing policy breaks mailing lists.<\/a><\/p>\n\n\n\n ICDSoft<\/a><\/strong> customers were affected as well, and we immediately applied a patch to our mailing list software which resolved the issue. <\/p>\n\n\n\n In short, you simply need to turn on email authentication for your account. Every new ICDSoft<\/a><\/strong> <\/a>customer gets DKIM <\/strong>and SPF <\/strong>enabled by default. Combined with our generous disk space offerings, advanced anti-spam protection and low prices, this makes us a preferable choice for many email users. And we also offer Free Migration<\/strong> with every account (which includes<\/u> Email).<\/p>\n\n\n\n If you are an existing client, to enable DKIM <\/strong>and SPF<\/strong>, navigate to the DNS Manager<\/strong> in the online Control Panel, and click the \"Enable\" buttons. <\/p>\n\n\n\n Most other service providers should have a similar easy way to enable support for these two technologies. If such support isn't available, you can use some online SPF<\/strong> and DKIM<\/strong> record generators, like https:\/\/mxtoolbox.com\/SPFRecordGenerator.aspx<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":" Google started rejecting messages due to failed authentication checks. Read our article for more information and a solution.<\/p>\n","protected":false},"author":1,"featured_media":4714,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"advgb_blocks_editor_width":"","advgb_blocks_columns_visual_guide":"","footnotes":""},"categories":[6,5],"tags":[],"class_list":{"0":"post-3913","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-security","8":"category-tech"},"author_meta":{"display_name":"ICDSoft","author_link":"https:\/\/www.icdsoft.com\/blog\/author\/icdsoft\/"},"featured_img":"https:\/\/www.icdsoft.com\/blog\/wp-content\/uploads\/2019\/02\/gmail-error-571-300x140.png","featured_image_src":"https:\/\/www.icdsoft.com\/blog\/wp-content\/uploads\/2019\/02\/gmail-error-571.png","featured_image_src_square":"https:\/\/www.icdsoft.com\/blog\/wp-content\/uploads\/2019\/02\/gmail-error-571.png","author_info":{"display_name":"ICDSoft","author_link":"https:\/\/www.icdsoft.com\/blog\/author\/icdsoft\/"},"coauthors":[],"tax_additional":{"categories":{"linked":["Security<\/a>","Technology<\/a>"],"unlinked":["Security<\/span>","Technology<\/span>"]}},"comment_count":"0","relative_dates":{"created":"Posted 7 years ago","modified":"Updated 4 months ago"},"absolute_dates":{"created":"Posted on February 28, 2019","modified":"Updated on March 19, 2026"},"absolute_dates_time":{"created":"Posted on February 28, 2019 9:16 am","modified":"Updated on March 19, 2026 8:15 am"},"featured_img_caption":"Failed email authentication check at Gmail","series_order":"","_links":{"self":[{"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/posts\/3913","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/comments?post=3913"}],"version-history":[{"count":86,"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/posts\/3913\/revisions"}],"predecessor-version":[{"id":14924,"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/posts\/3913\/revisions\/14924"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/media\/4714"}],"wp:attachment":[{"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/media?parent=3913"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/categories?post=3913"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.icdsoft.com\/blog\/wp-json\/wp\/v2\/tags?post=3913"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
https:\/\/support.google.com\/mail\/answer\/81126#authentication for more information. d16si9512682pgi.148 - gsmtp <\/p>\n\n\n\nHow does Email Authentication Work?<\/h2>\n\n\n\n
SPF<\/h3>\n\n\n\n
SPF records look like this: <\/strong>
v=spf1 a mx include:smtp-spf.someserver.com ~all <\/pre>\n\n\n\nThe SPF Process:<\/h4>\n\n\n\n
![\"SPF](\"https:\/\/www.icdsoft.com\/blog\/wp-content\/uploads\/2019\/02\/SPF-1024x437.jpg\")
<\/a>DKIM \/ DomainKeys<\/h3>\n\n\n\n
At ICDSoft DKIM is available out of the box<\/h2>
DKIM records look like this: <\/strong>
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDTYf0C\/D2g0vFGjYWb5gzZ2WDnBHiq++iHkCyQ1upCSokENuDAgRfAiWrW1M1Ge6dbZoI5RPzChmKe7PMqZf7fzj0+dvn6VP\/\/r\/+cZd6nmMh65cN\/iwwl7ncP6rngI8B4cfmgPfjU0eY46F511mThvAQ4TLvj7Han5qMZrG5FzwIDAQAB <\/pre>\n\n\n\nThe DKIM Process<\/h4>\n\n\n\n
![\"DKIM](\"https:\/\/www.icdsoft.com\/blog\/wp-content\/uploads\/2019\/02\/DKIM2-1024x379.jpg\")
<\/a>Why Does Email Get Blocked by Gmail All Of A Sudden?<\/h2>\n\n\n\n
At ICDSoft <\/strong>You Have Control<\/u><\/h2>
How Do I stop Gmail From Blocking Emails?<\/h2>\n\n\n\n
![\"Enabling](\"https:\/\/www.icdsoft.com\/blog\/wp-content\/uploads\/2019\/02\/mailprotectioncp.png\")
<\/a>