SPF lists the servers allowed to send for your domain. DKIM adds a signature that proves the message was not changed and came from your domain. DMARC ties both to the address in the From line and sets a policy: none (only report), quarantine (spam folder) or reject.
If you use a Gmail or Outlook address without your own domain, the provider handles this for you. With your own domain on Google Workspace or Microsoft 365, follow your provider’s setup guide and add the records at your DNS host. HawkOpen’s Deliverability Guardian reports bounces and rejections; it does not read DNS records.