What is a DMARC record?
DMARC (Domain-based Message Authentication, Reporting, and Conformance) is a security protocol that helps domain owners protect their brand against unauthorized use, such as phishing or forged emails.
It works by combining authentication policies such as SPF and DKIM to tell mail servers whether a message really comes from the domain it claims to represent.
A valid DMARC record improves the confidence of your messages, reduces the likelihood that your emails are marked as spam, and gives you reports about possible spoofing attempts.
Why is it important to have DMARC set up?
Maintaining a DMARC record helps you:
Prevent email fraud that could damage your domain's reputation.
Increase the deliverability of your campaigns and notifications.
Get visibility into who is sending email on behalf of your domain.
Comply with security policies recommended by the major providers (Google, Microsoft, Yahoo, etc.).
In short: DMARC protects your digital identity and strengthens the security of your communications.
How to interpret the results?
When you run a check, the system can show different types of results:
Valid DMARC record: Your domain is secure and correctly configured.
DMARC record incomplete or with warnings: The record exists, but could be improved to strengthen protection.
No DMARC record: Your domain does not have a DMARC record set up, which leaves the door open to spoofing.
Each result includes details on the policy applied (p=none, quarantine, or reject), configured reports (rua and ruf), and other technical parameters.
Basic recommendations
Use a reject policy (p=reject) once you verify that all of your legitimate emails are authenticated.
Configure report addresses (rua and ruf) to receive alerts about possible misuse.
Make sure you also have valid SPF and DKIM records.
Periodically review your DMARC reports to detect irregularities.
