{"id":9600,"date":"2024-09-03T11:44:43","date_gmt":"2024-09-03T11:44:43","guid":{"rendered":"https:\/\/marketing-optimization.diib.com\/learn\/?p=9600"},"modified":"2026-10-23T19:43:33","modified_gmt":"2026-10-23T19:43:33","slug":"how-to-set-up-dmarc","status":"publish","type":"post","link":"https:\/\/diib.com\/learn\/how-to-set-up-dmarc\/","title":{"rendered":"How to Set Up DMARC for Email Security"},"content":{"rendered":"

DMARC is an email authentication protocol. DMARC protects your domain from being misused by scammers. With DMARC, you can stop people from sending emails that pretend to come from your domain, which cuts down on phishing and spoofing. In this article, we\u2019ll cover why DMARC matters and how to set up DMARC to secure your emails.<\/p>\n

<\/span>What Is DMARC?<\/b><\/h2>\n

DMARC, which stands for Domain-based Message Authentication, Reporting, and Conformance, is a protocol designed to authenticate and protect email domains from unauthorized use, such as spoofing, phishing, and scams. <\/p>\n

DMARC builds on two older authentication methods, SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail), to check that emails really come from you. The current standard is RFC 9989<\/a>, published by the IETF (Internet Engineering Task Force) in 2026. DMARC checks the alignment of the “From” field with other authenticated domains and specifies how to handle emails that fail authentication tests.<\/p>\n

Without DMARC, your domain is easier for attackers to exploit. Attackers can send fraudulent emails that seem legitimate, tricking recipients into sharing sensitive information or clicking on malicious links. <\/p>\n

When you set up DMARC, you decide how receiving servers handle emails that fail the checks. A working DMARC record protects both your business and your customers.<\/p>\n

<\/span>How do you set up DMARC?<\/b><\/h2>\n

Set up SPF and DKIM first, then add a DMARC TXT record at _dmarc.yourdomain.com that starts with p=none, read the reports, and tighten the policy to quarantine and then reject.<\/p>\n

SPF and DKIM come first. Google\u2019s guide to setting up DMARC<\/a> says you must turn on SPF and\/or DKIM before you can use DMARC, and that SPF and DKIM should be authenticating your messages for at least 48 hours before you turn DMARC on. Once SPF and DKIM are working, follow the steps below to prepare your record, add the record to your DNS (Domain Name System) settings, and monitor and adjust your policy.<\/p>\n

<\/span>Step 1: Prepare Your DMARC Record<\/b><\/h3>\n

Before you can set up DMARC, you need to create a DMARC record. A DMARC record is a short line of text that you publish in your DNS settings. The record tells receiving mail servers how to handle emails from your domain that fail authentication checks.<\/p>\n

To create your DMARC record, you will need to define the following:<\/p>\n