DMARC Policy Guide

Learn how p=none, quarantine, and reject affect domain protection and email delivery.

Use p=none to observe

p=none asks receivers to send reports without changing message handling. It is the safest way to discover legitimate senders.

During this phase, fix SPF and DKIM alignment before enforcing stricter policy.

quarantine sends failing mail toward spam. reject asks receivers to refuse failing mail.

Use pct to phase in enforcement if your domain has many senders or legacy systems.

Recommended next steps

Turn this guide into a concrete DNS report for your own domain.

Generate SPF and DMARC records before publishing DNS changes.

Inspect a domain's DMARC policy for email authentication and reporting.

Find the SPF TXT record that controls which senders can mail for a domain.

Look up a DKIM selector record and inspect the public key published for a domain.

It helps receivers reject unauthenticated mail that claims your domain, but only when receivers honor DMARC.

Reports help discover unknown senders and authentication failures before you enforce policy.