Business email on your domain: which to choose and how to keep it out of spam
An address like sales@yourbusiness.com earns more trust than a free Gmail account. But if it isn't configured correctly, your quotes will end up in your client's spam folder. Here's how to do it right.
Key takeaways
- You have three main options: Google Workspace, Microsoft 365 or the email included with your hosting.
- Whichever you pick, you must set up SPF, DKIM and DMARC on your domain. Gmail, Yahoo and Outlook now require them from senders.
- One SPF record per domain, and start DMARC in monitoring mode.
Why use email on your own domain
A quote sent from sales@yourbusiness.com looks more professional and trustworthy than one from yourbusiness2026@gmail.com. Email on your domain also:
- Belongs to you: if an employee leaves, the account and its email stay with the company.
- Lets you create addresses by department (sales, support, billing) and aliases.
- Reinforces your brand in every message you send.
- Makes it harder for scammers to impersonate you, if authentication is set up properly.
Workspace vs. Microsoft 365 vs. hosting email
| Option | Best for | Pros | Considerations |
|---|---|---|---|
| Google Workspace | Teams already using Gmail and Google Drive | Gmail interface, excellent spam filtering, Drive, Meet and Calendar | Monthly cost per user |
| Microsoft 365 | Businesses that live in Word, Excel and Teams | Outlook, desktop Office apps, OneDrive and Teams | Monthly cost per user |
| Hosting email | Small businesses with low volume | Included in your plan at no extra cost | Less storage and more basic spam filters; if you switch hosts, you migrate email too |
| Zoho Mail and similar | Tight budgets | Affordable plans with solid features | Less integration with popular tools |
Our general advice: if email is critical to your business (quotes, invoicing, customer support), invest in Workspace or Microsoft 365. If you're just starting and send little email, your host's email is enough to get going.
SPF, DKIM and DMARC in plain English
They're three DNS records that prove to Gmail, Outlook and the rest that your email is legitimate. Since 2024, Google and Yahoo have required authentication from senders who email their users, and Microsoft enforces similar requirements on Outlook.com. Without them, your messages are far more likely to land in spam or be rejected.
- SPF (Sender Policy Framework): the list of servers authorized to send email on behalf of your domain.
- DKIM (DomainKeys Identified Mail): a digital signature on each email proving it wasn't altered and came from an authorized server.
- DMARC: the policy that tells receivers what to do when an email fails SPF and DKIM (deliver it, send it to spam or reject it), and where to send you reports.
How to set them up, step by step
1. MX records
They tell the world which server receives email for your domain. Your provider (Google, Microsoft or your host) gives you the exact values. Remove old MX records to avoid conflicts.
2. SPF
A TXT record at the root of the domain. Example for Google Workspace:
Type: TXT Name: @
v=spf1 include:_spf.google.com ~allA domain can only have one SPF record. If you also send email from your website, your store or an email marketing tool, add their include: entries to the same record instead of creating another one.
3. DKIM
Turn it on from your email provider's admin panel (in Google Workspace: Admin console → Gmail → Authenticate email). The provider generates a key you publish as a TXT record, for example named google._domainkey, and then you start signing.
4. DMARC
Start in monitoring mode so you don't block legitimate email while you review the reports:
Type: TXT Name: _dmarc
v=DMARC1; p=none; rua=mailto:dmarc@yourbusiness.comOnce you've confirmed for a few weeks that all your legitimate sending passes SPF or DKIM, raise the policy to p=quarantine and then p=reject. That stops others from sending fake email from your domain.
5. Verify
Send an email to a Gmail account, open "Show original" and check that SPF, DKIM and DMARC all say PASS. You can also use tools like Google Admin Toolbox or MXToolbox.
Common mistakes
- Having two SPF records (your host's and Google's) instead of one combined record.
- Jumping straight to DMARC
rejectand blocking your website's form emails. - Sending WordPress form emails from the server without authentication: use an SMTP plugin connected to your email provider.
- Sharing one mailbox and password across the whole team without two-step verification.
Frequently asked questions
Can I keep using the Gmail app with my business email?
Yes. With Google Workspace you use Gmail directly. With hosting email, you can also add it to the Gmail or Outlook app via IMAP and SMTP.
Will I lose my email if I switch providers?
Not if you migrate correctly. Google and Microsoft offer tools to import existing mailboxes. The key is to migrate before changing the MX records.
Is DMARC required for a small business?
Major providers mainly require it from high-volume senders, but setting it up is free, takes a few minutes and protects your brand from impersonation. We recommend always having it.
Conclusion
Choosing an email provider is the easy part; what makes the difference is configuring it correctly. With MX, SPF, DKIM and DMARC in place, your email reaches the inbox, your brand is protected against spoofing and your clients get your quotes on time.
