DMARC for Beginners: Protect Your Domain from Spoofing
What DMARC does, recommended policies (none vs quarantine vs reject), and how to publish your first record alongside SPF and DKIM.
DMARC tells receivers what to do when SPF or DKIM fail — nothing, quarantine, or reject. It also enables aggregate reports so you can see who sends as your domain.
Start with p=none
New domains should begin monitoring-only. Once SPF and DKIM pass consistently, tighten to quarantine then reject for stronger protection.
Want to see how your own domain is set up? Use the free SPF checker: it runs in your browser and stores nothing.