whohostsitCreate your
DMARC record.
Choose your policy and where reports should go,
then copy the record into your DNS.
One domain. The bigger picture.
Hosting, registrar, expiry, DNS records, email, and security details appear here.
PUBLIC DATA. ONE SIMPLE LOOKUP.Rolling out DMARC safely
Start with p=none and an aggregate report address (rua). Reports arrive daily from Google, Microsoft, Yahoo, and others, and show every server sending mail as your domain and whether it passes SPF and DKIM.
Once all your legitimate mail passes, move to p=quarantine, optionally with a lower pct so it applies to only some messages at first, then to p=reject. Gmail and Yahoo require bulk senders to publish at least p=none.
Common questions
Where do I add a DMARC record?
Create a TXT record named _dmarc at your DNS host, for example _dmarc.example.com, and paste the value. A domain has only one DMARC record.
What is the difference between rua and ruf?
rua receives daily aggregate reports, which most domains need. ruf receives copies of individual failed messages; few providers send them, and they can contain personal data.
What do adkim and aspf do?
They set alignment. Relaxed, the default, lets a subdomain such as mail.example.com match example.com; strict requires an exact match.