Contrary to popular belief, deploying DMARC to protect your company email is much easier than it seems. In this post, we will show you 3 easy steps to deploy DMARC: generate, publish, and analyze, as illustrated below:
Rest assured, we will keep it short and sweet.
Step 1. Generate a DMARC record
A DMARC record is a short snippet to be published to the DNS to instruct the email service provider how to handle an incoming email, depending on SPF and DKIM check results. Here is a more detailed explanation on this topic: Getting Started With DMARC. However, it's not required to fully understand it here.
To generate a DMARC record for your company domain to be protected, log in to the DMARCLY dashboard. The go to: DNS Records -> Publish DMARC Record, simply copy the snippet highlighted on the page in orange. Here is a screenshot of an example snippet:
Step 2. Publish the DMARC record to DNS
Now you have the DMARC record, let's publish it to the DNS, so that it becomes accessible to email service provides to perform DMARC checks.
To do so, log in to your DNS management console, choose the domain you need to publish the DMARC record on, e.g., mydomain.com.
Create a TXT entry on mydomain.com with these settings:
Type: TXT Host: _dmarc TXT Value: (DMARC record generated above) TTL: 1 hour
For example, here is what it looks like in GoDaddy's DNS management console:
If you are using CloudFlare, here is what it looks like:
After publishing, it takes up to 1 hour for the DMARC record to become accessible (usually much faster though). You can then use our tool to confirm that you have published it successfully: DMARC Checker.
Step 3. Analyze aggregate reports
Many email service providers send aggregate reports daily. This means you might get aggregate reports the day you publish the DMARC record.
However, it could take up to 72 hours before your first aggregate reports arrive. If you are not seeing any report after 72 hours, it could be that you did not publish the DMARC record correctly.
Sparky! You have now implemented DMARC for your domain.