Frequently Asked Questions

DMARC (Domain-based Message Authentication, Reporting & Conformance) is an email authentication protocol that lets domain owners specify how their email should be handled if it fails SPF or DKIM checks. It also provides reporting so you can see who is sending email on your behalf.

SPF (Sender Policy Framework) is a DNS record that lists which mail servers are authorized to send email for your domain. Receiving mail servers check this record to verify that incoming mail is coming from an authorized server.

DKIM (DomainKeys Identified Mail) adds a cryptographic signature to outgoing emails. Receiving servers can verify this signature to confirm the email hasn't been tampered with and was sent by an authorized sender.

Start with p=none to collect data without affecting email delivery. Once you understand your email ecosystem and are confident in your SPF/DKIM setup, move to p=quarantine, then finally p=reject to fully block unauthorized emails.

The initial DNS record takes effect within 24-48 hours. However, the process of reviewing reports and moving to a reject policy typically takes a few weeks to a few months depending on your email complexity.

If set up correctly, no. Start with p=none to monitor without impact. DMARC only affects emails that fail both SPF and DKIM alignment, so properly configured senders won't be affected.

Aggregate reports (sent to the rua= address) are daily XML files from receiving mail servers that summarize which sources sent email for your domain and whether those emails passed or failed authentication checks.

Yes! Our DMARC checker, SPF checker, and basic monitoring are free. We offer enhanced plans with unlimited domains, longer history, and forensic reports for a small monthly fee.