DMARC
Sitecheck Team
A policy that tells receiving mail servers what to do when SPF or DKIM checks fail.
DMARC (Domain-based Message Authentication, Reporting, and Conformance) is a DNS TXT record that tells receiving mail servers what to do if an email fails SPF or DKIM checks — either pass it, quarantine it to spam, or reject it outright.
Why it matters: DMARC prevents domain spoofing and phishing attacks from your domain, and provides aggregate reports showing who is sending mail on your behalf.
Quick tips:
- Start with
p=noneto receive reports without affecting delivery, then move top=quarantineand eventuallyp=reject. - Use the
ruatag to receive aggregate reports (e.g.rua=mailto:dmarc@example.com). - DMARC requires both SPF and DKIM to be in place and aligned to be effective.
See also: SPF, DKIM, DNS TXT Record.