DMARC

Sitecheck Team

A policy that tells receiving mail servers what to do when SPF or DKIM checks fail.

DMARC (Domain-based Message Authentication, Reporting, and Conformance) is a DNS TXT record that tells receiving mail servers what to do if an email fails SPF or DKIM checks — either pass it, quarantine it to spam, or reject it outright.

Why it matters: DMARC prevents domain spoofing and phishing attacks from your domain, and provides aggregate reports showing who is sending mail on your behalf.

Quick tips:

  • Start with p=none to receive reports without affecting delivery, then move to p=quarantine and eventually p=reject.
  • Use the rua tag to receive aggregate reports (e.g. rua=mailto:dmarc@example.com).
  • DMARC requires both SPF and DKIM to be in place and aligned to be effective.

See also: SPF, DKIM, DNS TXT Record.