SPF, DKIM and DMARC

These three DNS records tell receiving servers that your mail is legitimate.

SPF lists the servers allowed to send for your domain, DKIM adds a cryptographic signature, and DMARC tells receivers what to do when a check fails. Large providers increasingly require all three.