# DMARC

> DMARC (Domain-based Message Authentication, Reporting and Conformance) is a DNS policy that tells receiving mail servers what to do with messages that fail SPF and DKIM checks for a domain, and where to send reports about them.

Also called: Domain-based Message Authentication, Reporting and Conformance, DMARC record, DMARC policy, p=reject.

DMARC is a TXT record published at _dmarc followed by the domain name. A message passes if SPF or DKIM passes and the domain it used matches the From address people see, which is called alignment. The policy tag sets the action for failures: none only monitors, quarantine sends failures to spam, and reject refuses them. Receivers send back aggregate reports listing who is sending as the domain.

SPF and DKIM alone do not stop someone putting your domain in the From line. DMARC closes that gap, which protects customers and suppliers from fake invoices sent in your name. Large mailbox providers, including Google and Yahoo, require bulk senders to publish a DMARC record, so it now affects whether legitimate marketing and transactional email is accepted.

Jumping straight to reject can block real mail from tools nobody remembered, such as a booking system or scanner. Start at none, read the reports, fix each legitimate sender, then tighten to quarantine and reject. A policy left at none forever gives visibility but no protection. Subdomains and domains that send no mail need attention too. We move client domains to enforcement in stages, checking reports along the way.

## Where we do this work

- [Email and DNS deliverability](https://techpitsolutions.systems/services/email-dns-deliverability)
- [Cybersecurity services](https://techpitsolutions.systems/services/cybersecurity)

## See also

- [SPF (Sender Policy Framework)](https://techpitsolutions.systems/glossary/spf): SPF (Sender Policy Framework) is a DNS record that lists the servers allowed to send email for a domain, so that receiving mail servers can check whether a message came from an approved source.
- [DKIM (DomainKeys Identified Mail)](https://techpitsolutions.systems/glossary/dkim): DKIM (DomainKeys Identified Mail) is an email authentication method that adds a digital signature to each outgoing message, which receiving servers verify using a public key published in the sender's DNS.
- [Email deliverability](https://techpitsolutions.systems/glossary/email-deliverability): Email deliverability is the measure of whether the email a business sends actually reaches recipients' inboxes instead of being rejected, delayed, or filed in the spam folder.
- [Phishing](https://techpitsolutions.systems/glossary/phishing): Phishing is a type of fraud in which an attacker sends a message that pretends to come from a trusted sender in order to trick the recipient into revealing passwords, approving payments, or opening a malicious link or file.

---

Source: https://techpitsolutions.systems/glossary/dmarc

TechPit Solutions · Run by AI, backed by real people. A remote team working with businesses in the US, UK, Canada, Australia, New Zealand and Europe. Email info.techpit.co@gmail.com, WhatsApp +92 344 3360585. Book a 15-minute call: https://techpitsolutions.systems/contact