Declining Compliance

Fixing dropping authentication rates

4 min read Troubleshooting

Declining Compliance

If you see "Declining" warnings, investigate immediately.

Possible Causes

  • Recent infrastructure changes broke authentication
  • Email provider changed their sending IPs
  • DNS records were modified incorrectly
  • New email service added without SPF update
  • DKIM keys expired or rotated

Fix Steps

  1. Check DNS changes in the last 7 days
  2. Review if email services were updated
  3. Verify DKIM keys haven't expired
  4. Go to Authentication Troubleshooting to find failing sources
  5. Approve any legitimate sources missing from SPF

Important

Don't upgrade your DMARC policy until the declining trend is reversed.