Email Security

To enable Salesforce to send email, verify your email domains. And protect outbound communications with email security standards including Transport Layer Security (TLS), Sender Policy Framework (SPF), DomainKeys Identified Mail (DKIM), and Domain-based Message Authentication (DMARC). And help your users complete the required verification of their email address and return email address in Salesforce.

• Enable Salesforce to Send Email
  Before Salesforce can send email on behalf of your users, domain-level and user-level verification is required. Salesforce admins verify the domains that you own, and users verify their email and return email addresses.
• Email Security Mechanisms
  Salesforce supports several email security mechanisms: Transaction Layer Security (TLS), Sender Policy Framework (SPF), DomainKeys Identified Mail (DKIM), and Domain-based Message Authentication, Reporting, and Conformance (DMARC). Each mechanism protects different aspects of an email message.
• Authorized Email Domains
  To send email on behalf of your users, Salesforce requires that you verify ownership of your email domains. We recommend that you set up DomainKeys Identified Mail (DKIM) to complete that requirement. If you can’t set up DKIM keys, verify that you own a domain via an authorized email domain.
• User Email Address Verification
  Users can’t send outgoing email from Salesforce until their Salesforce email address and return email address are verified. Learn how to identify users with unverified email addresses and help them complete this required step.