DMARC
Domain-based Message Authentication, Reporting and Conformance (DMARC)
Email Marketing
DMARC is a DNS policy that tells inbox providers what to do with email that fails SPF or DKIM, and where to send reports.
What is DMARC?
A DMARC record lives at _dmarc.yourbrand.com and starts with v=DMARC1. Its policy (p=) has three levels:
- p=none: just report; deliver as usual.
- p=quarantine: send failing mail to spam.
- p=reject: block failing mail.
To pass, a message needs SPF or DKIM to pass and align with the From domain. Google and Yahoo require bulk senders to publish DMARC at p=none or stronger. Most brands start at p=none, read the reports, fix every legitimate sender, then tighten.
Example
v=DMARC1; p=none; rua=mailto:dmarc@yourbrand.com reports on all mail using your domain without blocking anything yet.
Why DMARC Matters
DMARC stops others from sending as your brand and is required by Gmail, Yahoo and Outlook for bulk senders.
DMARC FAQ
Is a DMARC policy of p=none enough?
It meets the Gmail and Yahoo bulk-sender minimum. Moving to quarantine or reject protects your brand from spoofing and is needed for BIMI.
Can I have two DMARC records?
No. A domain with two DMARC records is treated as having none. Merge them.
Explore More Terms
Browse our complete glossary of e-commerce and subscription terms.
