What exactly is DMARC and why is it important?

DMARC is short for Domain-based Message Authentication, Reporting, and Conformance . It is a protocol used along with SPF and DKIM, that ensures proper authentication of emails. It protects your sender domains from spoofing and gives you ability to monitor and control usage of your sender domain.

DMARC checks SPF and DKIM of incoming email - if mail is properly authenticated it goes through. If there is an error - received mail is not authenticated - the recipient server executes the policy from DMARC record. Later on the recipient server can send report to the domain owner about such incidents.

You can implement DMARC in many ways and our Wizard will help you create and customize a DMARC policy suited for your needs.

What type of DMARC policy do you want?

What percentage of emails should be analyzed?

The percentage value reflects how many emails will be checked against DMARC policy.

100% of emails will be checked

Would you like to receive aggregated reports about emails that failed DMARC check?

Aggregated Reports are compiled reports of all emails that failed authentication.

Error.

Would you like to receive forensic reports about emails that failed DMARC check?

Forensic reports are messages containing specific emails that failed authentication.

Error.

How strictly DMARC should check SPF and DKIM entries?

This setting configures how strict the recipient server should be while checking SPF and DKIM authentication of an email. The relaxed mode will accept authentication even if the email is sent from a subdomain. Strict mode accepts authentication only when the sender domain matches exactly with a SPF / DKIM domain.

SPF

DKIM

Generated record

Great! You've generated DMARC record.

Once you generated your DMARC record, you need to add it to your DNS zone on your sender domain. This will allow other servers to see it and use the instructions configured.

How to configure DMARC on your domain?

Once you generated your DMARC record, you need to add it to your DNS zone on your sender domain. This will allow other servers to see it and use the instructions configured.

Please go to your domain hosting panel and access a DNS Zone management. Each Domain Provider has its own way of customizing the DNS zone. If you do not know where it is located, please check your hosting provider's documentation or contact hosting support.

Once you have access to the DNS settings, add a following record:

Name: _dmarc(or_dmarc.yourdomain)

Type: TXT

Value: your Generated DMARC

Press save and wait a moment - the DNS entry propagation may take a while. You can check your entry status by accessing Command Line in your system and typing:

nslookup -type=txt _dmarc.yourdomain.com

If the record has been set up and propagated correctly, you will see your DMARC entry.

Build your audience. Grow your business.

Tens of thousands of companies already build their audience with Elastic Email.

Try for Free
sign up icon

Sign up

Create your Elastic Email account in less than 2 minutes with this link. No credit card required.

plan and pricing icon

Plans and pricing

If you are new to Elastic Email, feel free to check out our pricing plans that are perfectly crafted for small and mid-sized businesses.

contact icon

Have questions?

If you want to ask us somethings, don't hesitate to contact our Support team which is available 24/7!

Try for free