What should I set my DMARC policy to?
Start with p=none (monitor mode) if you are setting up DMARC for the first time. This lets you collect reports about who is sending email from your domain without affecting delivery. After 2–4 weeks of monitoring, review the reports, then move to p=quarantine. Once confident, enforce p=reject to fully protect your domain.
Where do I add the generated DMARC record?
Add the record as a TXT entry in your domain’s DNS settings. The hostname is _dmarc.yourdomain.com. Log into your DNS provider (e.g., Cloudflare, GoDaddy, Route 53), create a new TXT record with the name _dmarc and paste the generated value. Changes propagate within minutes to hours.
Do I need SPF and DKIM configured before adding DMARC?
Yes. DMARC depends on SPF and DKIM results to make policy decisions. If neither is configured, DMARC has nothing to evaluate and every message will fail alignment. Set up SPF and DKIM first, then add DMARC.
