Everything about SPF, DKIM, DMARC, email security and deliverability

How To Deploy DMARC In 3 Easy Steps

Contrary to popular belief, deploying DMARC to protect your company email is much easier than it seems. In this post, we will show you 3 easy steps to deploy DMARC: generate, publish, and analyze, as illustrated below:

Depploy DMARC In 3 Steps

Rest assured, we will keep it short and sweet.

Step 1. Generate a DMARC record

A DMARC record is a short snippet to be published to the DNS to instruct the email service provider how to handle an incoming email, depending on SPF and DKIM check results. Here is a more detailed explanation on this topic: Getting Started With DMARC. However, it's not required to fully understand it here.

To generate a DMARC record for your company domain to be protected, log in to the DMARCLY dashboard. The go to: DNS Records -> Publish DMARC Record, simply copy the snippet highlighted on the page in orange. Here is a screenshot of an example snippet:

Generate DMARC Record

Step 2. Publish the DMARC record to DNS

Now you have the DMARC record, let's publish it to the DNS, so that it becomes accessible to email service provides to perform DMARC checks.

To do so, log in to your DNS management console, choose the domain you need to publish the DMARC record on, e.g.,

Create a TXT entry on with these settings:

Type: TXT
Host: _dmarc
TXT Value: (DMARC record generated above)
TTL: 1 hour

For example, here is what it looks like in GoDaddy's DNS management console:

Publish DMARC Record In GoDaddy

If you are using CloudFlare, here is what it looks like:

Publish DMARC Record In GoDaddy

After publishing, it takes up to 1 hour for the DMARC record to become accessible (usually much faster though). You can then use our tool to confirm that you have published it successfully: DMARC Checker.

Step 3. Analyze aggregate reports

Many email service providers send aggregate reports daily. This means you might get aggregate reports the day you publish the DMARC record.

However, it could take up to 72 hours before your first aggregate reports arrive. If you are not seeing any report after 72 hours, it could be that you did not publish the DMARC record correctly.

Sparky! You have now implemented DMARC for your domain.

Introduction to SPF DMARC Aggregate Reports
Blog Comments powered by Disqus.