Set up correctly. Nothing to do.
Works, but worth tidying up.
Missing or broken. Inboxes may send you to spam.
What DMARC does
DMARC tells inboxes what to do with email that claims to be from you but fails SPF and DKIM: deliver it, send it to spam, or turn it away. It can also send you daily reports of who is sending as you.
The checker reads your policy and report addresses, falls back to your main domain if you check a subdomain, and confirms that any outside report service has agreed to receive your reports.
How to roll out DMARC safely
-
Start with p=none and a report address
Nothing changes for your email yet, and the reports start arriving.
-
Read your reports for 2 to 4 weeks
Make sure everything that sends as you passes: your newsletter, your mailbox and your store.
-
Move to p=quarantine, then p=reject
Each step makes faked email from your domain less likely to reach a reader.
Questions
Is p=none enough for Gmail and Yahoo?
Yes. Their rules ask for a DMARC record, and p=none counts. A stricter policy protects your name from scammers.
Do I need DMARC reports?
They aren't required, but without them p=none tells you nothing. Use an address you check, or a free report service.
What does "not authorised to receive reports" mean?
Your reports go to another domain that hasn't published the record saying it accepts them. Most report services set this up for you.
Where does the DMARC record go?
It is a TXT record at the host _dmarc, so _dmarc.janeauthor.com.
More free tools
Check a record
Start for free.
Give us 30 days to try it out, totally free. Don’t like it? Go your own way, with no contracts to break, no money to lose, and no hard feelings. But we’re betting you’ll like it.