Can you authenticate using a free domain?

No not for bulk sending. Free domains such as gmail.com or yahoo.com have their own p=reject DMARC policies. Senders cannot publish the required SPF DKIM or DMARC records meaning any mail sent from a third party as gmail.com will fail DMARC. Bulk senders must use a custom domain they control.