BEGINNER-FRIENDLY SECURITY GUIDE

What Is DMARC?

DMARC stands for Domain-based Message Authentication, Reporting, and Conformance. It helps domain owners protect the address people see in an email's From field.

DMARC checks alignment

DMARC passes when at least one qualifying method—SPF or DKIM—passes and aligns with the visible From domain. Alignment is important because SPF and DKIM can authenticate domains that differ from the sender people see.

DMARC policies

A domain owner may publish a policy of none, quarantine, or reject. These tell receiving systems how the owner wants failures handled. Actual delivery can still depend on the receiving provider's policies and other signals.

What a failure means

DMARC failure is a meaningful warning that the visible sender did not authenticate as required. Forwarding, mailing-list changes, or configuration errors can sometimes cause legitimate failures, so the result should be considered with the full message context.

What a pass does not prove

DMARC proves authorization and alignment for the domain being used. It does not prove domain ownership matches a claimed brand, or that an invoice, password request, or account change is genuine.

Check a suspicious email

Paste the message or full header into the local Email Analyzer to review technical warning signs.

Check an Email