Destination email organizations can also verify that the email domain has passed SPF or DKIM. The From address is the sender's email address that users see in their email client. Use email authentication to help prevent spoofingĭMARC prevents spoofing by examining the From address in messages. The rest of this article explains how these technologies work, and how EOP uses them to check inbound email. Microsoft 365 uses the following standards to verify inbound email:Įmail authentication verifies that email messages from a sender (for example, are legitimate and come from expected sources for that email domain (for example, ). Learn about who can sign up and trial terms here.Įmail authentication (also known as email validation) is a group of standards that tries to stop email messages from forged senders (also known as spoofing). Did you know you can try the features in Microsoft 365 Defender for Office 365 Plan 2 for free? Use the 90-day Defender for Office 365 trial at the Microsoft 365 Defender portal trials hub.