Setup Status

Understanding SPF, DKIM, and DMARC configuration state and setup score

4 min read Domain Management

Domain Setup Status

The Setup Status panel on your domain's overview page shows the current configuration state of all three email authentication protocols — SPF, DKIM, and DMARC. It gives you a quick at-a-glance health check and tells you what still needs configuring.

Status Indicators

Configured (green)

The record exists, is valid, and DMARC Busta is receiving reports for this protocol.

Partial (yellow)

A record exists but has issues — the policy is too weak, a required tag is missing, or SPF delegation is not set up.

Not Configured (red)

No valid record found. Initial setup is required.

What Gets Checked for Each Protocol

Protocol What the Check Verifies
DMARC _dmarc.yourdomain.com TXT record exists with a valid p= policy tag and an rua= address pointing to DMARC Busta so reports are received.
SPF A TXT record exists at the root domain. If using DMARC Busta's managed SPF, also checks that the delegation CNAME (_spf.yourdomain.com) is configured and the root SPF includes it.
DKIM DKIM selectors detected in DMARC reports are found in DNS and contain valid public keys. Multiple selectors (for different email services) are each checked independently.

Setup Score

The overall setup score (0–100) is calculated from your compliance rate across all protocols. The score drives the status icon shown on the domain list:

  • Green (80–100) — Strong configuration, all protocols healthy
  • Yellow (50–79) — Some issues to address, but basic protection is in place
  • Red (0–49) — Significant issues, email authentication not properly configured

Managed vs Unmanaged vs External

Managed

DMARC Busta controls this record via SPF delegation or a connected DNS provider API. Changes you make in the platform apply automatically to DNS.

Unmanaged

The record exists but DMARC Busta cannot modify it directly. You will need to apply recommended changes manually in your DNS provider.

External

The record is managed by a third-party tool. DMARC Busta monitors it but does not modify it.

Tip: Connect Your DNS Provider

Connecting Cloudflare, Route 53, or cPanel/WHM turns unmanaged records into managed ones, allowing DMARC Busta to apply changes automatically. See DNS Provider Setup for instructions.