Email Lockdown
Email Lockdown: stop criminals sending email as your business
A fixed, fully remote project that sets up SPF, DKIM and DMARC correctly, so fake invoices and payment requests using your domain get blocked. It works for any business on Microsoft 365 or Google Workspace, wherever you are.
How Email Lockdown works
About four weeks from start to finish, and most of that is careful watching so your real email never bounces.
1. Find every sender
We list everything that sends email as your domain: Microsoft 365, billing, website forms, newsletters. Missing one is what breaks email, so we start here.
2. Set up safely
We correct SPF, switch on DKIM signing and add DMARC in monitor-only mode, with daily reports coming to SinghIT.
3. Watch the reports
For about three weeks we read the reports, fix anything we missed and spot anyone already faking your domain.
4. Enforce and hand back
We move DMARC to reject, show you the before and after grade, then you remove our access. You get a short written report.
Choose how you want it done
Do it yourself
Free. Our check shows the exact records you need, and our step-by-step guide walks you through adding them.
Done with you
A screen-share session where a SinghIT engineer guides your own IT person through every change. No access needed.
Done for you
The full project above. You grant temporary, limited access and we handle everything, then hand it back.
Your access stays in your hands
You don’t need to be a SinghIT managed client. For Microsoft 365, we send a time-limited delegated admin request that you approve in one click. It covers only the email admin role and expires on a date we agree. For your domain, you add us as a temporary user or share your screen while we make the changes.
When the project ends, you remove our access. Everything is done remotely, so we can help businesses in Canada, the US, the UK and beyond.
Keep it locked down
DMARC reports keep arriving after the project. With ongoing email monitoring, SinghIT reads them for you and alerts you if someone starts faking your domain or a new tool sends unsigned email.
Email Lockdown: common questions
Do I need to be a SinghIT client?
No. Email Lockdown is a one-time project. You grant temporary access for the work and remove it at the end.
Will this break our email?
Not when it’s done in the right order. We start in monitor-only mode, watch the reports and only block fakes once every real sender is confirmed.
What access do you need?
Access to your domain’s DNS, and the email admin role in Microsoft 365 or Google Workspace to switch on DKIM. Both are temporary, and the screen-share option needs none.
How long does it take?
About four weeks. Setup takes one session; the rest is watching the reports before we switch DMARC to reject.
Can you help businesses outside Canada?
Yes. The work is fully remote, so the location of your business doesn’t matter.
What is DMARC?
DMARC is a DNS record that tells other mail servers what to do with email that claims to be from you but fails SPF and DKIM checks. Set to reject, it blocks those fakes.
Find out where you stand in 10 seconds
Run our free email security check, then book a free call to talk through the result. 437-880-2051 · solutions@singhit.com