← All sixteen checks DMARC (Domain-based Message Authentication, Reporting & Conformance)

DMARC
explained.

Overview

What is
DMARC?

DMARC tells receiving mail servers what to do with emails that fail SPF or DKIM checks. It also provides reporting on email authentication.

Importance

Why it
matters.

DMARC is the final layer of email security. It enforces SPF and DKIM policies and provides visibility into email authentication failures. Essential for protecting your business from email-based attacks.

Risks

What can
go wrong.

If DMARC is missing: you have no control over what happens to spoofed emails, no visibility into authentication failures, and cannot achieve complete email security.

Under the hood

Technical
details.

DMARC policies: "none" (monitor only), "quarantine" (send to spam), "reject" (reject email). Should include "pct=100" (apply to 100% of emails) and "rua=" (reporting email address).

Take action

Check your domain’s
DMARC policy.

Run a free security check to see how your domain scores across all sixteen checks, including DMARC validation.