DMARC explained and how to add it

What this solves

DMARC tells receiving servers what to do with mail that fails SPF or DKIM. It can improve deliverability and reduce spoofing.

What is DMARC?

DMARC (Domain-based Message Authentication, Reporting & Conformance) is a DNS TXT record at _dmarc.yourdomain.com. It specifies your policy (none, quarantine, reject) and where to send reports.

How to add it

In your DNS zone, add a TXT record for _dmarc (or _dmarc.yourdomain.com). Example: v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com. Start with p=none to collect reports without blocking.

Policy levels

p=none: monitor only. p=quarantine: often treat failures as spam. p=reject: reject failures. Move to quarantine or reject only after you’re sure legitimate mail passes SPF/DKIM.

When to contact support

If you’re not sure which policy to use or how to read reports, we can help.