Your domain
Policy
Only applies when a forensic (ruf) address is set.
Your DMARC record
v=DMARC1; p=none;
Add this at your DNS host
- p=none only monitors — it does not stop spoofed mail. Start here, then move to quarantine and reject once your reports look clean.
- Without a rua address you will never receive aggregate reports, so you are flying blind. Add a mailbox you actually read.
Already published a record? Check it — plus SPF, DKIM and MX — with the MX & email DNS checker.
How to roll out DMARC safely
- 1. Publish SPF and DKIM. DMARC only passes when one of them passes and aligns with your From domain.
- 2. Start at p=none. Add a rua address and collect reports for two to four weeks to find every service that sends as you.
- 3. Fix the legitimate senders. Authenticate your CRM, invoicing, help desk and marketing tools before tightening anything.
- 4. Move to p=quarantine. Optionally ramp with pct=25, then 50, then 100.
- 5. Finish at p=reject. Spoofed mail is now blocked outright, and your domain stops being usable for phishing.
Frequently asked questions
What is a DMARC record?
A DMARC record is a TXT record published at _dmarc.yourdomain.com. It tells receiving mail servers what to do with messages that fail SPF and DKIM checks, and where to send reports about those messages.
Which DMARC policy should I start with?
Start with p=none plus a rua reporting address. That changes nothing about delivery but gives you daily reports showing who sends mail as your domain. After a few weeks move to p=quarantine, then p=reject.
Do I need SPF and DKIM before DMARC?
Yes. DMARC only passes when SPF or DKIM passes and is aligned with the From domain. Publish SPF and DKIM first, then add DMARC on top.
Where do I add the record?
At your DNS host, create a TXT record with the host name _dmarc (some providers want the full _dmarc.yourdomain.com) and paste the generated value. It usually propagates within an hour.
What is the difference between rua and ruf?
rua receives aggregate XML reports summarising authentication results — this is the important one. ruf receives forensic copies of individual failing messages and is ignored by most large mailbox providers.
More free email tools
Launching a new brand alongside your email setup? Browse our premium domain marketplace — every name is $1,000 with instant transfer.