{"id":16726,"date":"2023-08-08T09:00:42","date_gmt":"2023-08-08T06:00:42","guid":{"rendered":"https:\/\/snov.io\/knowledgebase\/?p=16726"},"modified":"2026-02-01T15:49:28","modified_gmt":"2026-02-01T12:49:28","slug":"set-up-dmarc-policy-for-your-domain","status":"publish","type":"post","link":"https:\/\/snov.io\/knowledgebase\/set-up-dmarc-policy-for-your-domain\/","title":{"rendered":"How to set up DMARC record for your domain"},"content":{"rendered":"

This tutorial explains the DMARC record and how to set it up in your domain settings to improve your domain's health and security.<\/p>\n

\n
\"tip\"<\/div>\n
\n

Before configuring DMARC, ensure that SPF and DKIM records are already set up and have been active for at least 48 hours.<\/p>\n<\/div>\n<\/div>\n

DMARC record explained<\/a><\/strong><\/p>\n

How to set up DMARC record<\/a><\/strong><\/p>\n

How to check DMARC record<\/a><\/strong><\/p>\n

DNS settings examples<\/a><\/strong><\/p>\n

How to view DMARC reports<\/a><\/strong><\/p>\n

A DMARC record allows you to add an email authentication policy for your domain, specifying how receiving servers should handle emails that fail SPF and DKIM checks.<\/p>\n

\n
\"note\"<\/div>\n
\n
\n
\n
\n
\n

Why you should set up DMARC:<\/strong><\/p>\n

1) <\/strong>It improves your domain health and protects against email spoofing<\/p>\n

2) <\/strong>It lowers the risk of your emails being marked as spam or suspicious<\/p>\n

3) <\/strong>Get aggregate reports on email authentication<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

DMARC record explained<\/strong><\/h2>\n

Here's the basic DMARC record example:<\/p>\n

\n
v=DMARC1; p=none; rua=mailto: dmarc-reports@yourdomain.com.<\/div>\n<\/div>\n

DMARC policy:<\/strong> The part after \"p=\" <\/strong>is responsible for policy. This policy\u00a0<\/strong>specifies what will happen to emails that cannot pass SPF and DKIM checks. You can use the default policy (p=none)<\/em>, or change it to (p=quarantine)<\/em> or (p=reject)<\/em> if you want stricter protection.<\/p>\n

There are three options for a DMARC policy:<\/p>\n

    \n
  1. p=none<\/em><\/code> \u2192 This is a monitoring-only policy (not recommended). It allows all emails to be delivered, even if they fail the checks.<\/li>\n
  2. p=quarantine<\/em><\/code>(recommended)\u2192 <\/strong>This policy tells email providers to mark emails that fail the checks as suspicious and send them to the spam folder. This helps protect your domain from spoofing while still allowing recipients to view these emails.<\/li>\n
  3. p=reject<\/code><\/em> \u2192 This policy blocks all emails that fail DMARC checks, preventing them from reaching even the spam folder. It is the strictest setting, fully protecting your domain from unauthorized use, but it may sometimes result in legitimate emails being blocked.<\/li>\n<\/ol>\n

    DMARC reports:<\/strong><\/p>\n

    The DMARC record includes the email address after \"rua=mailto:\"<\/strong>\u2014this is the special email address where aggregate reports are sent.<\/p>\n

    Create a separate mailbox and it to your DMARC record if you want to receive them. These reports show email authentication statistics and help with potential security issues. These reports will be generated automatically and sent to this email address. (For more details, see the \"View DMARC reports\" section of this article.)<\/p>\n

    How to set up DMARC record<\/strong><\/h2>\n

    DMARC is added as a record in your domain's DNS settings.<\/p>\n

    Step 1: Create a new record in domain settings<\/strong><\/h3>\n

    To add DMARC to your domain, create a new record in your domain's DNS settings.<\/p>\n

    \n

    To access domain settings, log in to your domain hosting account \u2014 the platform or service where you purchased your domain name.<\/p>\n<\/div>\n

    Open DNS settings and find the option to create a new record.<\/p>\n

    Step 2: Add DMARC parameters<\/strong><\/h3>\n

    Your DMARC record should have the following parameters:<\/p>\n