Email & deliverability

Every simulation, training assignment, policy request, and report email has to reach the inbox. AfriPhish sends through a managed provider out of the box and lets you graduate to your own domain when you're ready.

How sending works

  • Default (managed) — out of the box, AfriPhish sends through its managed Resend account. Nothing to configure; simulations and notifications just send.
  • Per-tenant SMTP — point AfriPhish at your own SMTP server instead. Configure host, port, username, password, and TLS under Settings → Email Integration, then send a test. When SMTP is configured, it takes precedence over the managed provider for your organisation.

To use your own SMTP:

  1. Go to Settings → Email Integration.
  2. Enter your SMTP host, port (587 by default), username, password, and whether to use TLS.
  3. Send a test email to confirm it works before running a live campaign.

Dedicated sending domains (Pro+)

To send from your own domain with full alignment (so SPF/DKIM/DMARC pass and mail lands in the inbox), add a sending domain:

  1. Go to Settings → Deliverability and add your domain.
  2. Publish the generated DNS records at your DNS provider:
    • SPF (TXT)
    • DKIM — three CNAME records
    • DMARC (TXT)
    • MAIL-FROM subdomain records
  3. Wait for propagation, then verify. Once DKIM and verification both read verified, the domain is active for sending.

Requires setup — dedicated domains need DNS access to publish SPF/DKIM/DMARC records and a full-access email-provider key to create and verify the domain. Until a domain is verified, keep sending on the managed provider or your own SMTP.

Deliverability tips

  • Warm up gradually — don't blast your whole company on day one from a brand-new domain.
  • Keep your DMARC policy permissive (p=none) while you confirm alignment, then tighten it.
  • Use a subdomain (e.g. mail.yourcompany.com) so simulation sending never affects your primary corporate mail reputation.

Next: Automation & scheduling.