La Poste (laposte.net) has today announced significant changes to its email authentication requirements that will take effect in September 2025. These new requirements will fundamentally change how emails are processed and delivered to La Poste email addresses.
What’s changing?
Starting in September, La Poste will implement strict email authentication protocols that will affect all senders. Here’s what you need to know:
- Current state: Today, some emails without proper authentication protocols can still reach the inbox at laposte.net addresses.
- New requirements: Beginning in September, all emails that don’t pass SPF, DKIM, or DMARC authentication will end up in the spam folder, impacting your email deliverability.
What is SPF, DKIM and DMARC?
La Poste is requiring implementation of three critical email authentication protocols:
SPF (Sender Policy Framework)
SPF allows domain owners to specify which mail servers are authorized to send emails on behalf of their domain. It helps prevent email spoofing by validating that emails come from approved sources.
DKIM (DomainKeys Identified Mail)
DKIM adds a digital signature to emails, allowing recipients to verify that the message was sent by an authorized mail server and hasn’t been tampered with during transit.
DMARC (Domain-based Message Authentication, Reporting & Conformance)
DMARC builds upon SPF and DKIM, providing a policy framework that tells receiving mail servers what to do with emails that fail authentication checks.
Why today’s announcement is significant
La Poste’s announcement represents a broader industry shift toward mandatory email authentication. As stated by La Poste: “LPN expects senders to authenticate and protect their emails and domains. SPF and DKIM and DMARC will no longer be optional in the near future.” The move follows similar decisions from Google and Yahoo in 2024, and Microsoft earlier this year.
Extra resources
Read our bulk sender guide to understand the wider email authentication requirements previously announced from Yahooglesoft.
This decision reflects the email industry’s continued commitment to protecting users from phishing and spoofing attacks, ensuring only legitimate emails reach their intended recipients and preventing unauthorized use of domains for malicious purposes.
What action do you need to take?
The implications of these changes are significant:
- Immediate action required: Senders must implement all three authentication protocols before September.
- Zero tolerance: Unlike gradual implementations, La Poste will enforce 100% compliance from September.
- Deliverability risk: Emails without proper authentication will be relegated to spam folders, severely impacting campaign effectiveness.
Get started today with Red Sift OnDMARC
To stay compliant with La Poste’s September changes, use Red Sift OnDMARC to get from monitoring to full DMARC enforcement fast. With OnDMARC you can simplify SPF, DKIM, and DMARC in one platform.
Choosing Red Sift unlocks a range of benefits:
- Unified authentication management: Configure SPF, DKIM, DMARC, and MTA-STS in a single platform. One DNS update replaces repetitive manual edits.
- Actionable visibility: Access real-time notifications and detailed forensic reports on failed authentication attempts, powered by AI-driven spoof detection.
- Brand impact: Enforce DMARC (p=reject) and unlock Brand Indicators for Message Identification (BIMI), putting your verified logo in inboxes to boost recognition and trust.
- Faster resolution with automation: Red Sift Radar accelerates misconfiguration detection and remediation by up to 10x, keeping your operations lean and responsive.
- Ongoing protection: DNS Guardian continuously monitors your DNS for unauthorized or risky changes, safeguarding critical email records.
- Future-proof integration: Expand seamlessly into Red Sift’s wider security ecosystem, scaling as your needs grow.
Don’t get caught out this September. Start your free 14-day OnDMARC trial and follow a guided path to full DMARC enforcement with confidence.
