Question 1

What is DMARC?

Accepted Answer

DMARC stands for Domain-based Message Authentication, Reporting, and Conformance. It is an email authentication, policy, and reporting protocol that prevents unauthorized use of your email domain, protects it from spoofing and phishing, and improves deliverability ensuring legitimate emails reach recipients' inboxes.

Question 2

How does DMARC work?

Accepted Answer

It works with SPF and DKIM to verify legitimate emails. To pass DMARC email authentication, you must ensure that SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) are working correctly. Altogether, SPF, DKIM, and DMARC create the perfect authentication suite to protect your domain and your customers.
 
After deploying DMARC, receiving mail servers check SPF and DKIM alignment, refer to your DMARC policy to decide whether to pass, quarantine, or reject the email, and then send you a report on the actions taken for all emails sent from your domain.

Question 3

How to create a DMARC record?

Accepted Answer

Generating and adding a DMARC record is easy. The GlockApps DMARC Analyzer tool can help you do it quickly. Just add the generated DMARC record to your domain's DNS. Once configured, send emails from your domain and receive DMARC reports.
 
GlockApps will analyze these reports and provide your email authentication data in a comprehensive and user-friendly way.

Question 4

Does a subdomain need a DMARC record?

Accepted Answer

By default, the DMARC record published for the main domain works for all the subdomains set up on the main domain. The policy used in the DMARC record published for the main domain is applied to all of the emails sent from the subdomains. You can change the policy applied to the emails sent from the subdomains using the sp= tag in the DMARC record.
 
Publishing a DMARC record for a subdomain is needed when:
- you don't want to use the sp= tag in the DMARC record published for the main domain;
- you want to get DMARC analytics for the subdomain in a separate report.

Question 5

Why deploy the DMARC record?

Accepted Answer

Deploying your DMARC record is essential for:
 
**Email Authentication:** Ensures emails are from legitimate senders by tying together SPF and DKIM.
 
**Domain Protection:** Prevents email spoofing attacks, scams, or other spam.
 
**Email Traffic Visibility:** Provides insights into your email traffic.

Question 6

How to check if DMARC is enabled?

Accepted Answer

To check if DMARC is enabled for your domain use our free online DMARC validation tool: enter your domain name, click to start verification, and review the results. The tool will analyze your domain's DNS records and display whether DMARC is enabled, along with details about the DMARC policy and configuration.

Question 7

Why check the DMARC record?

Accepted Answer

Regular checking with the DMARC inspector ensures that your DMARC policy is properly implemented and functioning. It provides detailed reports on email authentication results to monitor and improve your email practices.

Question 8

What are DMARC policies?

Accepted Answer

DMARC policies instruct email receivers (Gmail, Outlook, Yahoo, and other Internet Service Providers) on what to do with emails that fail DMARC tests.
 
The three policies are:
 
**None (p=none):** Do nothing; the email goes to the Inbox or Spam folder based on ISP filters.
 
**Quarantine (p=quarantine):** Place the email in a Junk or Spam folder.
 
**Reject (p=reject):** Block the email completely.
 
You can also set a policy percentage (pct=) to apply the policy to a specific percentage of failing emails.

Question 9

How does the DMARC policy determine the action for each email?

Accepted Answer

Your DMARC record policy provides three options for handling incoming emails: none (take no action), quarantine, or reject. You must specify one of these actions in the record settings.

Question 10

What is a DMARC report?

Accepted Answer

A DMARC report informs you about critical aspects of your domain, such as unauthorized use, email authentication, sending volume and frequency, and potential threats, with two types available: aggregate and forensic.
 
DMARC reports provide insights into:
- Servers or services sending messages that fail DMARC.
- Percentage of messages from your domain that pass DMARC.
- Servers or third-party senders authorized to send mail for your domain.
- Actions taken by receiving servers on unauthenticated messages: none, quarantine, or reject.

Question 11

How fast will DMARC analytics be collected?

Accepted Answer

The GlockApps DMARC Analyzer is able to receive DMARC aggregate and forensic reports immediately after the DMARC record takes effect. DMARC reports are created and sent to the email addresses included in the DMARC record one time per 24 hours. The GlockApps DMARC Analyzer is collecting and processing the reports in the real time as far as they are coming.

Question 12

Which DMARC policy should I choose to protect my domain from malicious activity?

Accepted Answer

Security organizations recommend configuring your DMARC policy to enhance protection against malicious attacks. You can choose one of the following options:
- Quarantine unauthorized emails;
- Reject unauthorized emails.

Question 13

Why is DMARC important for email deliverability?

Accepted Answer

DMARC is crucial for email deliverability because it enhances security by ensuring that emails are properly authenticated with SPF and DKIM. This, in turn, builds trust with ESPs and increases the likelihood that your legitimate emails will reach receivers' inboxes rather than being marked as spam or blocked. Thus, properly implementing DMARC policies can significantly improve your email deliverability rates.

Question 14

What are the benefits of using a DMARC record checker tool?

Accepted Answer

Using our free online DMARC record checker simplifies the process of verifying and securing your email domain. Quickly validate the existence and accuracy of your DMARC records, ensure proper setup with guided instructions, and detect any configuration errors related to SPF and DKIM alignment. Our DMARC testing tool provides real-time feedback, helping you enhance email security by protecting against spoofing and phishing attacks effectively.

Question 15

What is the difference between DMARC aggregate reports and forensic reports?

Accepted Answer

DMARC Aggregate Reports provide insights into overall email authentication trends and help identify legitimate sources. In contrast, Forensic Reports provide detailed data on specific fraudulent emails, including sender details, subject, and sometimes message headers.

Question 16

Is DMARC implementation mandatory for compliance with regulatory norms?

Accepted Answer

Implementing DMARC is increasingly considered necessary and strongly recommended for regulatory compliance in many industries, as it helps prevent domain spoofing and strengthens email security measures. Check out international requirements to ensure that your organization's DMARC policy is compliant with global email security standards.

Question 17

Is the DMARC Checker tool free to use?

Accepted Answer

Yes, our online DMARC checker tool is completely free of charge. You should not be concerned about any hidden charges or any limitation on the number of domains you enter to verify their DMARC records status.

Free DMARC Checker Tool

Free DMARC Checker: Lookup Your DMARC Record

Start Securing Your Emails Today

About the DMARC Checker Tool

Frequently Asked Questions