--- title: "Legal professionals also require email authentication- here’s what you need to know | DuoCircle" description: "Legal professionals also require email authentication- here’s what you need to know." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/email-security/legal-professionals-need-email-authentication-what-you-should-know/" --- Quick Answer Law firms are high-value phishing targets because they hold confidential client data and authorize wire transfers. The 2024 Semrad Law Firm impersonation scam, which threatened recipients with wage garnishments over fake debts, would have failed against properly authenticated email. The three protocols to deploy: SPF (TXT record listing IPs and servers authorized to send for the firm's domain), DKIM (cryptographic signature in the headers verifying integrity in transit), and DMARC (policy on top of SPF and DKIM specifying handling for unauthenticated mail: p=none for monitoring, p=quarantine to send to spam, p=reject to bounce). Add rua and ruf reporting addresses, set sp for subdomain handling, choose strict or relaxed alignment via aspf and adkim, and use pct for gradual rollout. Move from p=none to p=quarantine to p=reject over weeks, not days, while reviewing aggregate reports. Legal professionals also require email authentication- here’s what you need to know Your browser does not support the audio element. [ Download episode](https://media.mailhop.org/duocircle/images/2024/11/Legal-professionals-also-require-email-authentication-heres-what-you-need-to-know.mp3) Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Femail-security%2Flegal-professionals-need-email-authentication-what-you-should-know%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Legal%20professionals%20also%20require%20email%20authentication-%20here%E2%80%99s%20what%20you%20need%20to%20know&url=undefined%2Fblog%2Femail-security%2Flegal-professionals-need-email-authentication-what-you-should-know%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Femail-security%2Flegal-professionals-need-email-authentication-what-you-should-know%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Femail-security%2Flegal-professionals-need-email-authentication-what-you-should-know%2F&title=Legal%20professionals%20also%20require%20email%20authentication-%20here%E2%80%99s%20what%20you%20need%20to%20know "Share on Reddit") [ ](mailto:?subject=Legal%20professionals%20also%20require%20email%20authentication-%20here%E2%80%99s%20what%20you%20need%20to%20know&body=Check out this article: undefined%2Fblog%2Femail-security%2Flegal-professionals-need-email-authentication-what-you-should-know%2F "Share via Email") ![email authentication](https://media.mailhop.org/duocircle/images/2024/11/spf-validator.jpg) Emails are one of the most used mediums for attempting phishing. Irrespective of your **industry and operational style**, if your work involves the exchange of emails (which almost every business does in today’s time), then you could be the [target of phishers](https://thehackernews.com/2024/11/new-phishing-kit-xiu-gou-targets-users.html). In 2024, there have been **multiple reports of law firms** falling victim to email phishing scams. A prominent example includes sending [phishing emails in the name of the Semrad Law Firm](https://www.rocketcitynow.com/article/news/verify/fox54-verified/ace-cash-express-legal-owe-a-debt-emailed-a-threat-how-we-verify-this-message-is-a-phishing-attempt/525-311ade27-1bc2-4a4f-ba00-7005fc76d174) to threaten recipients with wage garnishments over alleged unpaid debts. _The phishing email had several red flags, like inconsistency in the amount to be paid, unprofessional tone, non-existing ‘I AGREE’ button, etc_. We don’t know how much monetary loss was included in this incident, but what we do know is that this phishing attempt would have failed completely had there been [email authentication](/resources/email-authentication) protocols in place. **Legal professionals and firms** are among the hottest targets because they store and handle highly confidential information. Whether you manage sensitive client data or [create legal documents online](https://legally.io/), it’s crucial to safeguard your reputation, money, and clients from [malicious emails](https://www.securitymagazine.com/articles/100687-the-last-six-months-shows-a-341-increase-in-malicious-emails) sent in your name. ## Ensuring only authorized entities send emails on your behalf SPF, DKIM, and DMARC are three email authentication protocols that ensure that only **trusted and permitted entities** send emails on behalf of you or your law business. Out of these three, DKIM helps recipients know if [email content](https://www.sender.net/blog/email-content/) has been altered in transit. With the deployment and regular management of SPF, DKIM, and DMARC, you get- - Secured email infrastructure - Improved [email deliverability](/a-guide-on-email-deliverability) - Improved conversion rates - **Better sender’s reputation** of your domain Now, here is how each of these protocols works to protect the [email infrastructure](https://www.voilanorbert.com/blog/email-infrastructure/) of your law firm- ### SPF or Sender Policy Framework SPF is the foundational protocol that prevents email phishing and spoofing attempted by compromising your business domain. It works by empowering you to specify which IP addresses and mail servers you officially allow to be used for sending emails on your behalf. These **IP addresses and mail servers** could be the ones belonging to you, your employees, CXOs, [third-party vendors](https://www.upguard.com/blog/third-party-vendor), etc. Upon receiving emails from your domain, the **recipients’ servers check** if they have been sent from one of these authorized IP addresses and [mail servers](https://www.activecampaign.com/glossary/mail-server). If yes, the emails are placed in the primary inboxes of the intended recipients. If not, they are either dumped in the [spam folders](https://cybernews.com/news/microsofts-breach-notification-emails-end-up-in-spam-folder/) or rejected outright. Consider [SPF](/resources/what-is-spf) as a guest list of an exclusive event, where anyone whose name isn’t on the **guest list** won’t be allowed to enter the event. [![spam folder](https://media.mailhop.org/duocircle/images/2024/11/spf-permerror-2.jpg)](https://media.mailhop.org/duocircle/images/2024/11/spf-permerror-2.jpg) ### DKIM or DomainKeys Identified Mail DKIM is a method for verifying email authenticity. It adds a [digital signature](https://www.techtarget.com/searchsecurity/definition/digital-signature) to each email, ensuring it hasn’t been altered during transit. When the email is sent, it’s signed with a [private key](https://utimaco.com/service/knowledge-base/keys-secrets-management/private-key). The receiving **email provider checks** this signature using a [public key](https://www.techopedia.com/definition/16139/public-key) found in the sender’s DNS records to confirm the email’s integrity. To understand this better, think of a **half-heart locket for couples**. If the two halves of the locket don’t combine to make a perfect full heart, then it’s a problem. ### DMARC or Domain-based Message Authentication, Reporting, and Conformance DMARC is built on SPF and DKIM to provide a way for domain owners to specify what actions receiving mailboxes should take with **unauthorized emails** sent from their domains. Domain owners publish a DMARC policy in their [DNS records](https://www.ibm.com/topics/dns-records), specifying how to **handle emails** that fail SPF or DKIM checks. They can choose to monitor, quarantine, or reject these emails. When an email is received, the **receiving server checks** if it has passed the SPF and DKIM verifications. [DMARC](/resources/what-is-dmarc) then verifies if the email’s ‘**From’ address aligns** with the results of these checks. Based on the results, the chosen policy is applied. ## Get started with DMARC for your law firm’s email infrastructure Use an online DMARC generator tool to produce a [DMARC record](/resources/create-dmarc-records). Generally, you will have to provide the following basic pieces of information- - **Domain name**: The **domain you want to protect** (for example, mylegaldomain.com) - **Policy**: The action you want a recipient’s mailbox should take with unauthenticated emails sent from your domain. Choose one of the following: - - **p=none**: No action; just monitor. - **p=quarantine**: [Suspicious emails](https://www.darkreading.com/cloud-security/new-dmarc-data-shows-75-increase-in-suspicious-emails-hitting-inboxes) are sent to the spam folder. - **p=reject**: Block emails that fail DMARC checks. - **rua**: It’s an optional but highly encouraged information that you should provide. This is the email address where you want to receive aggregate reports that provide an overview of **sending sources** and DMARC results. - **ruf**: This is again an **optional email address** where you want to receive forensic reports on individual emails that didn’t pass the SPF and [DKIM](/resources/what-is-dkim) checks. - **sp**: sp stands for subdomain policy for emails sent from your subdomains. Again, it’s optional to provide this information. We recommend you use this if you use subdomains to send emails. - **aspf and adkim**: _This tag specifies how strictly SPF and DKIM should align with your domain. Options are ‘relaxed’ or ‘strict_.’ - **pct**: The percentage of messages the [DMARC policy](/resources/dmarc-policy) applies to, from 1 to 100\. For instance, setting it to 50 would apply your policy to half of your messages, which is **helpful for gradual implementation**. Here’s a basic example of a DMARC record- _v=DMARC1; p=quarantine; rua=mailto:[dmarc-reports@mylegaldomain.com](mailto:dmarc-reports@mylegaldomain.com); pct=70; sp=quarantine; adkim=s; aspf=r;_ Here, the ‘v’ value refers to the version of DMARC being used. Currently, there is only one **DMARC version**, so the value of ‘v’ is ‘1.’ [![ threat actors](https://media.mailhop.org/duocircle/images/2024/11/spf-record-check-8142.jpg)](https://media.mailhop.org/duocircle/images/2024/11/spf-record-check-8142.jpg) ## Final words It’s getting common for [threat actors](https://www.infosecurity-magazine.com/news/us-israel-iran-new-tradecraft/) to impersonate reputed legal organizations or individuals to send emails on their behalf. There is a higher chance that targets will open such emails because of the **claimed sender’s credibility**. _The more valuable the target and information, the more sophisticated these scams get_. We at [DuoCircle](/) can help you jump the queue of being the next target of [email phishing and spoofing](https://thehackernews.com/2024/07/proofpoint-email-routing-flaw-exploited.html). [Reach out to us](/contact) for email authentication services for **legal professionals and stay secure**. Our experts will be your warriors. ## Topics DKIMDMARCspf D DuoCircle DuoCircle Team The DuoCircle team covers email security, authentication, and infrastructure. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) ## Related Articles [ Email Security 12m DMARC, SPF, and DKIM in 2026: Why Email Authentication Is Now a Regulatory Requirement, Not Just a Best Practice Apr 29, 2026 ](/blog/dmarc-spf-dkim-2026-email-authentication-regulatory-requirement-best-practice/)[ Email Security 5m Email Monitoring Tools: A Complete Guide to Protecting Your Email Ecosystem May 7, 2026 ](/blog/email-monitoring-tools-guide-protecting-your-email-ecosystem-security/)[ Email Security 6m 3 emerging AI-powered cyber threats and how to stay protected from them in 2025 Jun 27, 2025 ](/blog/email-security/3-ai-powered-cyber-threats-2025-and-how-to-stay-safe/)[ Email Security 6m 5 efficient email security techniques for advanced persistent threats Dec 3, 2024 ](/blog/email-security/5-efficient-email-security-techniques-for-advanced-persistent-threats/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"Legal professionals also require email authentication- here’s what you need to know","description":"Legal professionals also require email authentication- here’s what you need to know.","url":"https://www.duocircle.com/blog/email-security/legal-professionals-need-email-authentication-what-you-should-know/","datePublished":"2024-11-06T18:30:55.000Z","dateModified":"2025-08-21T17:55:42.000Z","dateCreated":"2024-11-06T18:30:55.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/duocircle/#person","name":"DuoCircle","url":"https://www.duocircle.com/authors/duocircle/","jobTitle":"DuoCircle Team","description":"The DuoCircle team publishes articles on email security, authentication, and infrastructure.","knowsAbout":["email security","content writing"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":[]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/email-security/legal-professionals-need-email-authentication-what-you-should-know/"},"articleSection":"email-security","keywords":"DKIM, DMARC, spf","wordCount":1006,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2024/11/spf-validator.jpg","caption":"email authentication","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"Email Security"},{"@type":"ListItem","position":3,"name":"Legal professionals also require email authentication- here’s what you need to know","item":"https://www.duocircle.com/blog/email-security/legal-professionals-need-email-authentication-what-you-should-know/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"Email Security","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Legal professionals also require email authentication- here’s what you need to know","item":"https://www.duocircle.com/blog/email-security/legal-professionals-need-email-authentication-what-you-should-know/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"Legal professionals also require email authentication- here’s what you need to know","description":"Legal professionals also require email authentication- here’s what you need to know.","url":"https://www.duocircle.com/blog/email-security/legal-professionals-need-email-authentication-what-you-should-know/","datePublished":"2024-11-06T18:30:55.000Z","dateModified":"2025-08-21T17:55:42.000Z","dateCreated":"2024-11-06T18:30:55.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/duocircle/#person","name":"DuoCircle","url":"https://www.duocircle.com/authors/duocircle/","jobTitle":"DuoCircle Team","description":"The DuoCircle team publishes articles on email security, authentication, and infrastructure.","knowsAbout":["email security","content writing"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":[]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/email-security/legal-professionals-need-email-authentication-what-you-should-know/"},"articleSection":"email-security","keywords":"DKIM, DMARC, spf","wordCount":1006,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2024/11/spf-validator.jpg","caption":"email authentication","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```