At Monad, we like to keep you informed about behind-the-scenes updates that affect your organisation’s day-to-day operations. Today, we need to highlight an urgent, industry-wide shift in email security protocols that requires immediate attention from your IT or domain administration team.
Microsoft has quietly rolled out strict new email authentication requirements for mail sent to Outlook.com, Hotmail.com, and Live.com addresses.
What Changed?
Last year, Microsoft announced a set of email compliance standards targeting high-volume senders dispatching more than 5,000 emails per day. However, these rules now appear to have been applied across the board without prior notice, regardless of your daily sending volume.
We first saw this sudden shift reported by Mythic Beasts, and we are now seeing an increase in email delivery failures impacting live customers whose emails to Microsoft domains are being rejected or filtered unreliably.
Microsoft now appears to require all external senders to have valid SPF, DKIM, and DMARC records properly configured in their domain DNS. The good news? You don’t need a complex policy to comply – simply publishing a basic DMARC policy of p=none is enough to satisfy the requirement.
What You Need to Do
Whether this new behaviour is an intended permanent enforcement or a temporary glitch on Microsoft’s end remains unclear. Regardless, publishing a DMARC record is considered essential email best practice, takes minutes to set up, and will safeguard your messages from bouncing.
To ensure your emails continue reaching Outlook and Hotmail addresses successfully, ask your IT team or domain administrator to add the following DNS TXT record to your domain (if you don’t already have one configured):
- Host / Name:
_dmarc - Type:
TXT - Value:
v=DMARC1; p=none;
Note: If your domain already uses a DMARC record, no changes are required. You can verify whether your record is active by checking for a DNS entry named
_dmarc.yourdomain.com.
If you do not implement this change, you risk finding that automated notifications, booking confirmations, and direct emails sent from your domain to Outlook.com, Hotmail.com, and Live.com are rejected or delivered unreliably.
The Big Picture
Taking a step back, email security requirements across major providers like Google and Microsoft are tightening permanently. While unexpected policy enforcement can cause temporary friction, adopting robust authentication standards like SPF, DKIM, and DMARC protects your brand reputation, prevents domain spoofing, and ensures your critical customer communications always land where they belong.
If your team needs assistance updating your DNS records or checking your current setup, please reach out to your IT support provider or domain registrar right away.