Skip to main content

DMARC

Written by Zoltan Wagner

Outlook.com, Hotmail, Live and MSN reject email from domains without a DMARC record, regardless of sending volume. Many other email providers (such as Google and Yahoo) require that senders who send over 5,000 emails daily have DMARC in place.

What is DMARC

DMARC stands for Domain-based Message Authentication, Reporting, and Conformance. It specifies how to handle unauthorized emails sent via the domain you send emails from.


Check if DMARC is in place already

If you're not sure if you already have DMARC in place you can check it here.


Configure DMARC

Setup of DMARC needs to be completed by the IT person or team who has access to manage the domain you send emails from. You can send a link to this page to them.

If not yet configured, add a TXT record to the DNS of the domain you send emails from.

⚠️ Along with DMARC, you also need a DKIM record with the same domain as you use in your DMARC policy.

A DMARC entry is made up of several tags as described on this page.

At minimum it needs to contain two tags, the "p" and "v" tags. The "rua" tag is strongly recommended. A basic DMARC entry looks like this:

v=DMARC1; p=none; rua=mailto:alerts@yourdomain.com

  • v indicates the version

  • p indicates the policy; what happens if a message fails authentication (reject, quarantine or allow delivery)

  • rua is the email address to send reports to

Did this answer your question?