Publish and enforce DMARC
Email · about 15 min
In plain words
DMARC ties SPF and DKIM together and tells mailboxes what to do with mail that fails: nothing, spam folder, or reject. It also sends you reports.
What can go wrong
Without an enforcing DMARC policy, anyone can send email that appears to come from your exact domain.
How to fix it
Pick the platform your site runs on. Not sure? Forward this page to whoever manages your website.
Step 1 — monitor
Type: TXT Name: _dmarc Value:
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.comStep 2 — quarantine
v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc@yourdomain.comStep 3 — reject
v=DMARC1; p=reject; rua=mailto:dmarc@yourdomain.comBefore you change anything: Move from none → quarantine → reject over 2–4 weeks, after reports show all your real senders pass SPF or DKIM. Otherwise your own newsletters or invoices may be blocked. Add it in your DNS provider (Cloudflare → DNS → Records, cPanel → Zone Editor, or your registrar). Changes usually take effect within minutes, sometimes up to a few hours.
Check that it worked
Re-run the ProbeHunt check.