Category: Security and Law 25

SPF, DKIM and DMARC: Why Your Emails Aren’t Getting Through (and How to Fix It)

Since February 2024, Gmail and Yahoo require domains that send them email to be authenticated with SPF, DKIM and — for bulk senders — DMARC. Without this configuration, your messages risk landing in spam or being rejected outright, even when they're perfectly legitimate. For an SMB, that's very concrete: quotes that never arrive, invoices that go unread, lost form confirmations. The good news: the setup is done once, in your domain's DNS settings, and fixes the problem for good. …

Lire plus

Law 25: The Complete Guide to Making Your Website Compliant

Law 25 applies to every business that collects personal information in Quebec, regardless of size. For your website, that translates into concrete obligations: obtaining valid consent before activating non-essential cookies, publishing a clear privacy policy, framing every form that collects data and appointing a person in charge of the protection of personal information. Since September 2024, all of the law's provisions have been in force. Here's what that means, without the legal jargon. What exactly is Law …

Lire plus

Password managers: why we chose Proton Pass

At Elefen, every sensitive credential — client sites, hosting accounts, admin accounts — goes through a password manager. Our choice: Proton Pass. An independent security audit, conducted by the firm Recurity Labs and published in May 2026, confirms the soundness of that decision. Here's why this practice is essential for a web agency, and what it concretely changes for you. A password manager: basic hygiene, not a luxury A web agency holds the keys …

Lire plus