{"id":15984,"date":"2024-10-11T18:10:00","date_gmt":"2024-10-11T18:10:00","guid":{"rendered":"https:\/\/easydmarc.com\/blog\/?p=15984"},"modified":"2026-09-15T11:41:59","modified_gmt":"2026-09-15T11:41:59","slug":"what-is-dmarc","status":"publish","type":"post","link":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/","title":{"rendered":"What is DMARC and How Does it Work?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">DMARC is an email authentication protocol that helps protect organizations and their email recipients from fraudulent emails. Since its initial introduction in 2012, DMARC has become a fundamental domain security tool and a global email authentication standard. It works by using two protocols, SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail), to verify a message&#8217;s authenticity. DMARC then uses the results of these checks to decide what should happen when an email fails authentication.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">By setting a DMARC policy, domain owners can tell receiving mail servers how to handle suspicious messages. This helps reduce phishing and spoofing attempts while also giving organizations better visibility into how their domains are being used for email.<\/p>\n\n\n\n<h2 id=\"h-what-does-dmarc-stand-for\" class=\"wp-block-heading\"><strong>What Does DMARC Stand For?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">DMARC stands for \u201cDomain-based Message Authentication, Reporting, and Conformance.\u201d DMARC builds on two existing email authentication protocols, Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM), to provide an extra layer of defense.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">DMARC also gives domain owners more control over how receiving mail servers handle emails that fail authentication checks. It helps organizations identify unauthorized use of their domains and provides reports that offer visibility into their email-sending activity.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Let\u2019s discuss the importance of DMARC, how DMARC works, what DMARC records and DMARC policies are, and the benefits of DMARC.<\/p>\n\n\n\n<h2 id=\"h-what-does-dmarc-do-and-why-is-it-important\" class=\"wp-block-heading\"><strong>What Does DMARC Do, and Why Is It Important?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">DMARC ensures that only authorized senders can use your domain by verifying SPF and DKIM authentication for outgoing messages. When considering what DMARC does, its primary role is to safeguard your organization\u2019s reputation and protect clients and partners from fraudulent emails that appear to come from your email address. DMARC is crucial for defending your domain against <a href=\"https:\/\/easydmarc.com\/blog\/phishing-attacks-recognize-and-avoid-email-phishing\/\">phishing<\/a> and spoofing attacks. Additionally, DMARC reports provide insights into how your domain is used and help you detect unauthorized activity before it becomes a serious threat.<\/p>\n\n\n\n<h2 id=\"h-how-does-dmarc-work\" class=\"wp-block-heading\"><strong>How Does DMARC Work?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">DMARC works by verifying the authenticity of emails using SPF and DKIM. SPF allows a domain owner to specify which email servers are authorized to send emails on behalf of their domain, while DKIM allows the sender to add a digital signature to their messages, providing a means for the recipient to verify the mail\u2019s authenticity.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If the email fails either SPF or DKIM alignment, DMARC applies the policy you\u2019ve set. DMARC allows email domain owners to publish policies in their Domain Name System or DNS records specifying how email receivers should handle messages that claim to be from their domain or email address.<\/p>\n\n\n\n<h2 id=\"h-what-are-dmarc-policies\" class=\"wp-block-heading\"><strong>What are DMARC Policies?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">There are three main DMARC policies that a domain owner can specify:<\/p>\n\n\n\n<h3 id=\"h-none-p-none\" class=\"wp-block-heading\"><strong>None (p=none)<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">This policy is used for monitoring purposes. Under this policy, email recipients do not take any specific action based on DMARC results. Both legitimate emails and malicious emails land in your inbox. The domain owner receives reports about the authentication status of emails claiming to be from their domain. This allows them to assess the impact of implementing DMARC without impacting the delivery of messages.<\/p>\n\n\n\n<h3 id=\"h-quarantine-p-quarantine\" class=\"wp-block-heading\"><strong>Quarantine (p=quarantine)<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">With this policy, if an incoming email fails DMARC authentication, the email receiver is instructed to treat it with suspicion and may choose to move it to the recipient\u2019s spam folder or junk folder. The message is not outright rejected, but it is flagged as potentially suspicious.<\/p>\n\n\n\n<h3 id=\"h-reject-p-reject\" class=\"wp-block-heading\"><strong>Reject (p=reject)<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Reject is the strictest DMARC policy. If an incoming message fails DMARC authentication, the email receiver is instructed to reject it outright, preventing the mail from reaching the recipient\u2019s inbox. This policy provides the highest level of protection against email spoofing and phishing.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Organizations are advised to start with a \u201cp=none\u201d policy for monitoring, analyze their mail activity, and then gradually move to a more restrictive policy like \u201cp=quarantine\u201d or \u201cp=reject\u201d.<\/p>\n\n\n\n<h3 id=\"h-what-is-a-dmarc-record\" class=\"wp-block-heading\"><strong>What is a DMARC Record?<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A DMARC record is a TXT entry in a domain\u2019s DNS that specifies how email servers should handle messages that fail authentication checks. It works in conjunction with SPF and DKIM to help prevent email spoofing and phishing. By implementing a DMARC record, domain owners can define policies that instruct receiving mail servers to accept, quarantine, or reject emails that fail authentication.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Additionally, DMARC records enable domain owners to receive detailed reports on email authentication activity. These reports provide insights into which sources are sending mail on behalf of the domain and whether they pass authentication checks. This visibility helps businesses detect unauthorized email use and strengthen their overall security posture.<\/p>\n\n\n\n<h2 id=\"h-the-structure-of-dmarc-records\" class=\"wp-block-heading\"><strong>The Structure of DMARC Records<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The structure of DMARC records includes several key components, or tags, that specify how to handle messages claiming to be from the organization\u2019s domain.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Tag Name<\/strong><\/td><td><strong>Purpose<\/strong><\/td><td><strong>Sample<\/strong><\/td><\/tr><tr><td><strong>v<\/strong><\/td><td>Protocol version<\/td><td>v=DMARC1<\/td><\/tr><tr><td><strong>p<\/strong><\/td><td>Policy for organizational domain<\/td><td>p=quarantine<\/td><\/tr><tr><td><strong>pct<\/strong><\/td><td>Percentage of messages subjected to filtering<\/td><td>pct=20<\/td><\/tr><tr><td><strong>rua<\/strong><\/td><td>Reporting URI of <a href=\"https:\/\/easydmarc.com\/blog\/understanding-dmarc-reports\/\">aggregate reports<\/a><\/td><td>rua=mailto:aggrep@example.com<\/td><\/tr><tr><td><strong>ruf<\/strong><\/td><td>Reporting URI for <a href=\"https:\/\/easydmarc.com\/blog\/what-is-a-dmarc-failure-report\/\">forensic reports<\/a><\/td><td>ruf=mailto:authfail@example.com<\/td><\/tr><tr><td><strong>adkim<\/strong><\/td><td>Alignment mode for DKIM<\/td><td>adkim=s<\/td><\/tr><tr><td><strong>aspf<\/strong><\/td><td>Alignment mode for SPF<\/td><td>aspf=r<\/td><\/tr><tr><td><strong>sp<\/strong><\/td><td>Policy for subdomains<\/td><td>sp=reject<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Here\u2019s an example of a simple DMARC TXT record:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cv=DMARC1; p=reject; rua=mailto:aggregate@example.com; ruf=mailto:forensic@example.com; pct=90; adkim=s; aspf=r\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In this example, the organization has implemented DMARC with the most robust policy of \u201cp=reject,\u201d requests aggregate reports to be sent to \u201caggregate@example.com,\u201d forensic reports to \u201cforensic@example.com,\u201d allows for 90% flexibility in applying the policy, and uses strict DKIM and SPF alignment.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you\u2019re struggling to write DMARC TXT accurately, <a href=\"https:\/\/easydmarc.com\/tools\/dmarc-lookup\">check out our free DMARC lookup tool.<\/a><\/p>\n\n\n\n<h2 id=\"h-what-are-the-benefits-of-dmarc-in-email\" class=\"wp-block-heading\"><strong>What are the Benefits of DMARC in Email?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Think of DMARC as email insurance, as it helps protect your domain and email communications from different online attacks and threats. It checks whether emails are properly authenticated and lets domain owners decide what to do with messages that fail these checks. This can make email safer while also giving you better visibility into your email traffic.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Take a look at some of the key benefits of DMARC in email:<\/p>\n\n\n\n<h3 id=\"h-phishing-and-spoofing-prevention\" class=\"wp-block-heading\"><strong>Phishing and Spoofing Prevention<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">DMARC helps protect recipients from phishing and spoofing attacks by checking whether an email is allowed to use your domain. This makes it harder for attackers to pretend to be your organization and send fake emails.<\/p>\n\n\n\n<h3 id=\"h-increased-email-deliverability\" class=\"wp-block-heading\"><strong>Increased Email Deliverability<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">DMARC can help improve email deliverability by showing email providers that your domain uses proper authentication. When your legitimate emails pass these checks, providers are more likely to trust and deliver them.<\/p>\n\n\n\n<h3 id=\"h-brand-protection\" class=\"wp-block-heading\"><strong>Brand Protection<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">DMARC helps protect your brand by reducing the chances of attackers using your domain to send fake emails. This is especially important for businesses that regularly communicate with customers, partners, and employees through email.<\/p>\n\n\n\n<h3 id=\"h-reporting-and-visibility\" class=\"wp-block-heading\"><strong>Reporting and Visibility<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">DMARC reports show you where your emails are coming from and whether they are passing authentication checks. You can use this information to find unauthorized senders and improve your email security.<\/p>\n\n\n\n<h3 id=\"h-regulatory-compliance\" class=\"wp-block-heading\"><strong>Regulatory Compliance<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Using DMARC can help organizations meet certain email security requirements and industry standards. It also shows that the organization is taking steps to protect its email communications.<\/p>\n\n\n\n<h3 id=\"h-improved-customer-trust\" class=\"wp-block-heading\"><strong>Improved Customer Trust<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Customers are more likely to trust emails when they know they are really coming from your organization. By reducing domain impersonation, DMARC helps protect the trust people have in your brand.<\/p>\n\n\n\n<h2 id=\"h-your-dmarc-journey-made-simple\" class=\"wp-block-heading\"><strong>Your DMARC Journey Made Simple<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Implementing DMARC requires careful configuration and ongoing monitoring, but the benefits in email security and trustworthiness are substantial. While DMARC implementation requires technical expertise, EasyDMARC has developed <a href=\"https:\/\/easydmarc.com\/tools\">a range of tools<\/a> to make your DMARC journey a breeze. We provide comprehensive guidance and walk you through every stage of email authentication, ensuring you have the knowledge and tools needed for smooth compliance.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you\u2019re ready to start protecting your company and meeting your compliance goals, <a href=\"https:\/\/easydmarc.com\/contact-us\" target=\"_blank\" rel=\"noreferrer noopener\">get in touch with us today<\/a>.<\/p>\n\n\n\n<h2 id=\"h-frequently-asked-questions\" class=\"wp-block-heading\"><strong>Frequently Asked Questions<\/strong><\/h2>\n\n\n\n<div class=\"schema-faq wp-block-yoast-faq-block\"><div class=\"schema-faq-section\" id=\"faq-question-1789471347459\"><strong class=\"schema-faq-question\">What Are the Key Concepts in DMARC?<\/strong> <p class=\"schema-faq-answer\">The three main concepts involved in DMARC are policy (defines the action a receiving mail server should take when an email fails authentication), alignment (used to match the domain in the From header with the domains used in SPF and DKIM), and reporting (allowing domain owners to receive aggregate and forensic reports on authentication performance).<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1789471373949\"><strong class=\"schema-faq-question\">What Type of Cyber Attack Does DMARC Protect Against?<\/strong> <p class=\"schema-faq-answer\">DMARC is designed to protect against domain spoofing, an attack in which an email is sent by an unauthorized sender (who will sometimes pretend to be a legitimate entity), to help protect users against cyber threats that can put their personal or professional data at risk.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1789471394572\"><strong class=\"schema-faq-question\">How Does Implementing DMARC Help Protect Users?<\/strong> <p class=\"schema-faq-answer\">Implementing DMARC helps protect individuals and companies from unauthorized users or third parties trying to send emails on their behalf.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1789471413675\"><strong class=\"schema-faq-question\">How Do I Configure DMARC For Email?<\/strong> <p class=\"schema-faq-answer\">To configure DMARC, create a DMARC record in your domain\u2019s DNS settings. You can use the EasyDMARC DMARC Record Generator to create the record and the DMARC Lookup Tool to check if it is published correctly.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-1789471432750\"><strong class=\"schema-faq-question\">What is the Difference Between DKIM and DMARC?<\/strong> <p class=\"schema-faq-answer\">DKIM adds a digital signature to emails to verify they came from an authorized sender. DMARC uses DKIM and SPF results to check email authenticity and tells receiving servers what to do with messages that fail these checks.<\/p> <\/div> <\/div>\n","protected":false},"excerpt":{"rendered":"<p>DMARC, which stands for \u201cDomain-based Message Authentication, Reporting &#038; Conformance\u201d, is an\u00a0email authentication, policy, and reporting protocol. It builds on the widely deployed\u00a0SPF\u00a0and\u00a0DKIM\u00a0protocols. It adds linkage to the author (\u201cFrom \u201d), domain name, by the help of published policies which helps the recipient handle the authentication failures, and reporting from receivers to senders to improve and monitor the protection of the domain from fraudulent email.<\/p>\n<p>Email authentication technologies (SPF and DKIM) were developed over a decade ago in order to provide advanced privacy on the identity of the sender of a message. The use of these technologies is going to increase day by day, but the problem of fraudulent and fake emails still exists. If a sender uses these technologies, it will be easy for email receivers to easily differentiate the fraudulent messages from the real and legal\u00a0emails. Unfortunately, it has not worked that way for a number of reasons:<\/p>\n","protected":false},"author":58,"featured_media":63412,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":"","jetpack_post_was_ever_published":true},"categories":[204,285,203],"tags":[],"class_list":["post-15984","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","category-dmarc","category-email-security"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.4 (Yoast SEO v28.4) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>What is DMARC and How Does it Work?<\/title>\n<meta name=\"description\" content=\"DMARC, or Domain-based Message Authentication, Reporting, and Conformance, is critical to protecting your company and its servers from email-based threats.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What is DMARC and How Does it Work?\" \/>\n<meta property=\"og:description\" content=\"DMARC, or Domain-based Message Authentication, Reporting, and Conformance, is critical to protecting your company and its servers from email-based threats.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/\" \/>\n<meta property=\"og:site_name\" content=\"EasyDMARC\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/EasyDMARC\/\" \/>\n<meta property=\"article:published_time\" content=\"2024-10-11T18:10:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-15T11:41:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/easydmarc.com\/blog\/wp-content\/uploads\/2024\/10\/What-is-DMARC-Hero-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1440\" \/>\n\t<meta property=\"og:image:height\" content=\"910\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Ruben Khachatryan\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@easydmarc\" \/>\n<meta name=\"twitter:site\" content=\"@easydmarc\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ruben Khachatryan\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/\"},\"author\":{\"name\":\"Ruben Khachatryan\",\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/#\\\/schema\\\/person\\\/9766f07d4ef9704ee4f6810b32788c1c\"},\"headline\":\"What is DMARC and How Does it Work?\",\"datePublished\":\"2024-10-11T18:10:00+00:00\",\"dateModified\":\"2026-09-15T11:41:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/\"},\"wordCount\":1550,\"publisher\":{\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/What-is-DMARC-Hero-2.png\",\"articleSection\":[\"Blog\",\"DMARC\",\"Email Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#respond\"]}]},{\"@type\":[\"WebPage\",\"FAQPage\"],\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/\",\"url\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/\",\"name\":\"What is DMARC and How Does it Work?\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/What-is-DMARC-Hero-2.png\",\"datePublished\":\"2024-10-11T18:10:00+00:00\",\"dateModified\":\"2026-09-15T11:41:59+00:00\",\"description\":\"DMARC, or Domain-based Message Authentication, Reporting, and Conformance, is critical to protecting your company and its servers from email-based threats.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#breadcrumb\"},\"mainEntity\":[{\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#faq-question-1789471347459\"},{\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#faq-question-1789471373949\"},{\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#faq-question-1789471394572\"},{\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#faq-question-1789471413675\"},{\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#faq-question-1789471432750\"}],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#primaryimage\",\"url\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/What-is-DMARC-Hero-2.png\",\"contentUrl\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/What-is-DMARC-Hero-2.png\",\"width\":1440,\"height\":910,\"caption\":\"image for what is dmarc article\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\\\/\\\/easydmarc.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blog\",\"item\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/category\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Email Security\",\"item\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/category\\\/blog\\\/email-security\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"DMARC\",\"item\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/category\\\/blog\\\/email-security\\\/dmarc\\\/\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"What is DMARC and How Does it Work?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/\",\"name\":\"EasyDMARC\",\"description\":\"Blog\",\"publisher\":{\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/easydmarc.com\\\/#organization\",\"name\":\"EasyDMARC\",\"url\":\"https:\\\/\\\/easydmarc.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/easydmarc.com\\\/img\\\/logo.png\"},\"image\":{\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/EasyDMARC\\\/\",\"https:\\\/\\\/x.com\\\/easydmarc\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/easydmarc\\\/mycompany\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/#\\\/schema\\\/person\\\/9766f07d4ef9704ee4f6810b32788c1c\",\"name\":\"Ruben Khachatryan\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5f27eee0b7b7d4f7b6d1b4b7a485211ddd89e0e9205459180fc36e502b22ee12?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5f27eee0b7b7d4f7b6d1b4b7a485211ddd89e0e9205459180fc36e502b22ee12?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5f27eee0b7b7d4f7b6d1b4b7a485211ddd89e0e9205459180fc36e502b22ee12?s=96&r=g\",\"caption\":\"Ruben Khachatryan\"},\"url\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/author\\\/ruben\\\/\"},{\"@type\":\"Question\",\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#faq-question-1789471347459\",\"position\":1,\"url\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#faq-question-1789471347459\",\"name\":\"What Are the Key Concepts in DMARC?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"The three main concepts involved in DMARC are policy (defines the action a receiving mail server should take when an email fails authentication), alignment (used to match the domain in the From header with the domains used in SPF and DKIM), and reporting (allowing domain owners to receive aggregate and forensic reports on authentication performance).\",\"inLanguage\":\"en-US\"},\"inLanguage\":\"en-US\"},{\"@type\":\"Question\",\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#faq-question-1789471373949\",\"position\":2,\"url\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#faq-question-1789471373949\",\"name\":\"What Type of Cyber Attack Does DMARC Protect Against?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"DMARC is designed to protect against domain spoofing, an attack in which an email is sent by an unauthorized sender (who will sometimes pretend to be a legitimate entity), to help protect users against cyber threats that can put their personal or professional data at risk.\",\"inLanguage\":\"en-US\"},\"inLanguage\":\"en-US\"},{\"@type\":\"Question\",\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#faq-question-1789471394572\",\"position\":3,\"url\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#faq-question-1789471394572\",\"name\":\"How Does Implementing DMARC Help Protect Users?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Implementing DMARC helps protect individuals and companies from unauthorized users or third parties trying to send emails on their behalf.\",\"inLanguage\":\"en-US\"},\"inLanguage\":\"en-US\"},{\"@type\":\"Question\",\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#faq-question-1789471413675\",\"position\":4,\"url\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#faq-question-1789471413675\",\"name\":\"How Do I Configure DMARC For Email?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"To configure DMARC, create a DMARC record in your domain\u2019s DNS settings. You can use the EasyDMARC DMARC Record Generator to create the record and the DMARC Lookup Tool to check if it is published correctly.\",\"inLanguage\":\"en-US\"},\"inLanguage\":\"en-US\"},{\"@type\":\"Question\",\"@id\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#faq-question-1789471432750\",\"position\":5,\"url\":\"https:\\\/\\\/easydmarc.com\\\/blog\\\/what-is-dmarc\\\/#faq-question-1789471432750\",\"name\":\"What is the Difference Between DKIM and DMARC?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"DKIM adds a digital signature to emails to verify they came from an authorized sender. DMARC uses DKIM and SPF results to check email authenticity and tells receiving servers what to do with messages that fail these checks.\",\"inLanguage\":\"en-US\"},\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"What is DMARC and How Does it Work?","description":"DMARC, or Domain-based Message Authentication, Reporting, and Conformance, is critical to protecting your company and its servers from email-based threats.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/","og_locale":"en_US","og_type":"article","og_title":"What is DMARC and How Does it Work?","og_description":"DMARC, or Domain-based Message Authentication, Reporting, and Conformance, is critical to protecting your company and its servers from email-based threats.","og_url":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/","og_site_name":"EasyDMARC","article_publisher":"https:\/\/www.facebook.com\/EasyDMARC\/","article_published_time":"2024-10-11T18:10:00+00:00","article_modified_time":"2026-09-15T11:41:59+00:00","og_image":[{"width":1440,"height":910,"url":"https:\/\/easydmarc.com\/blog\/wp-content\/uploads\/2024\/10\/What-is-DMARC-Hero-2.png","type":"image\/png"}],"author":"Ruben Khachatryan","twitter_card":"summary_large_image","twitter_creator":"@easydmarc","twitter_site":"@easydmarc","twitter_misc":{"Written by":"Ruben Khachatryan","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#article","isPartOf":{"@id":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/"},"author":{"name":"Ruben Khachatryan","@id":"https:\/\/easydmarc.com\/blog\/#\/schema\/person\/9766f07d4ef9704ee4f6810b32788c1c"},"headline":"What is DMARC and How Does it Work?","datePublished":"2024-10-11T18:10:00+00:00","dateModified":"2026-09-15T11:41:59+00:00","mainEntityOfPage":{"@id":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/"},"wordCount":1550,"publisher":{"@id":"https:\/\/easydmarc.com\/blog\/#organization"},"image":{"@id":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#primaryimage"},"thumbnailUrl":"https:\/\/easydmarc.com\/blog\/wp-content\/uploads\/2024\/10\/What-is-DMARC-Hero-2.png","articleSection":["Blog","DMARC","Email Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#respond"]}]},{"@type":["WebPage","FAQPage"],"@id":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/","url":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/","name":"What is DMARC and How Does it Work?","isPartOf":{"@id":"https:\/\/easydmarc.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#primaryimage"},"image":{"@id":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#primaryimage"},"thumbnailUrl":"https:\/\/easydmarc.com\/blog\/wp-content\/uploads\/2024\/10\/What-is-DMARC-Hero-2.png","datePublished":"2024-10-11T18:10:00+00:00","dateModified":"2026-09-15T11:41:59+00:00","description":"DMARC, or Domain-based Message Authentication, Reporting, and Conformance, is critical to protecting your company and its servers from email-based threats.","breadcrumb":{"@id":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#breadcrumb"},"mainEntity":[{"@id":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#faq-question-1789471347459"},{"@id":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#faq-question-1789471373949"},{"@id":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#faq-question-1789471394572"},{"@id":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#faq-question-1789471413675"},{"@id":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#faq-question-1789471432750"}],"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/easydmarc.com\/blog\/what-is-dmarc\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#primaryimage","url":"https:\/\/easydmarc.com\/blog\/wp-content\/uploads\/2024\/10\/What-is-DMARC-Hero-2.png","contentUrl":"https:\/\/easydmarc.com\/blog\/wp-content\/uploads\/2024\/10\/What-is-DMARC-Hero-2.png","width":1440,"height":910,"caption":"image for what is dmarc article"},{"@type":"BreadcrumbList","@id":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/easydmarc.com\/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https:\/\/easydmarc.com\/blog\/category\/blog\/"},{"@type":"ListItem","position":3,"name":"Email Security","item":"https:\/\/easydmarc.com\/blog\/category\/blog\/email-security\/"},{"@type":"ListItem","position":4,"name":"DMARC","item":"https:\/\/easydmarc.com\/blog\/category\/blog\/email-security\/dmarc\/"},{"@type":"ListItem","position":5,"name":"What is DMARC and How Does it Work?"}]},{"@type":"WebSite","@id":"https:\/\/easydmarc.com\/blog\/#website","url":"https:\/\/easydmarc.com\/blog\/","name":"EasyDMARC","description":"Blog","publisher":{"@id":"https:\/\/easydmarc.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/easydmarc.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/easydmarc.com\/#organization","name":"EasyDMARC","url":"https:\/\/easydmarc.com\/","logo":{"@type":"ImageObject","url":"https:\/\/easydmarc.com\/img\/logo.png"},"image":{"@id":"https:\/\/easydmarc.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/EasyDMARC\/","https:\/\/x.com\/easydmarc","https:\/\/www.linkedin.com\/company\/easydmarc\/mycompany\/"]},{"@type":"Person","@id":"https:\/\/easydmarc.com\/blog\/#\/schema\/person\/9766f07d4ef9704ee4f6810b32788c1c","name":"Ruben Khachatryan","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/5f27eee0b7b7d4f7b6d1b4b7a485211ddd89e0e9205459180fc36e502b22ee12?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/5f27eee0b7b7d4f7b6d1b4b7a485211ddd89e0e9205459180fc36e502b22ee12?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5f27eee0b7b7d4f7b6d1b4b7a485211ddd89e0e9205459180fc36e502b22ee12?s=96&r=g","caption":"Ruben Khachatryan"},"url":"https:\/\/easydmarc.com\/blog\/author\/ruben\/"},{"@type":"Question","@id":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#faq-question-1789471347459","position":1,"url":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#faq-question-1789471347459","name":"What Are the Key Concepts in DMARC?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"The three main concepts involved in DMARC are policy (defines the action a receiving mail server should take when an email fails authentication), alignment (used to match the domain in the From header with the domains used in SPF and DKIM), and reporting (allowing domain owners to receive aggregate and forensic reports on authentication performance).","inLanguage":"en-US"},"inLanguage":"en-US"},{"@type":"Question","@id":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#faq-question-1789471373949","position":2,"url":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#faq-question-1789471373949","name":"What Type of Cyber Attack Does DMARC Protect Against?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"DMARC is designed to protect against domain spoofing, an attack in which an email is sent by an unauthorized sender (who will sometimes pretend to be a legitimate entity), to help protect users against cyber threats that can put their personal or professional data at risk.","inLanguage":"en-US"},"inLanguage":"en-US"},{"@type":"Question","@id":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#faq-question-1789471394572","position":3,"url":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#faq-question-1789471394572","name":"How Does Implementing DMARC Help Protect Users?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"Implementing DMARC helps protect individuals and companies from unauthorized users or third parties trying to send emails on their behalf.","inLanguage":"en-US"},"inLanguage":"en-US"},{"@type":"Question","@id":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#faq-question-1789471413675","position":4,"url":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#faq-question-1789471413675","name":"How Do I Configure DMARC For Email?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"To configure DMARC, create a DMARC record in your domain\u2019s DNS settings. You can use the EasyDMARC DMARC Record Generator to create the record and the DMARC Lookup Tool to check if it is published correctly.","inLanguage":"en-US"},"inLanguage":"en-US"},{"@type":"Question","@id":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#faq-question-1789471432750","position":5,"url":"https:\/\/easydmarc.com\/blog\/what-is-dmarc\/#faq-question-1789471432750","name":"What is the Difference Between DKIM and DMARC?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"DKIM adds a digital signature to emails to verify they came from an authorized sender. DMARC uses DKIM and SPF results to check email authenticity and tells receiving servers what to do with messages that fail these checks.","inLanguage":"en-US"},"inLanguage":"en-US"}]}},"jetpack_featured_media_url":"https:\/\/easydmarc.com\/blog\/wp-content\/uploads\/2024\/10\/What-is-DMARC-Hero-2.png","_links":{"self":[{"href":"https:\/\/easydmarc.com\/blog\/wp-json\/wp\/v2\/posts\/15984","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/easydmarc.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/easydmarc.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/easydmarc.com\/blog\/wp-json\/wp\/v2\/users\/58"}],"replies":[{"embeddable":true,"href":"https:\/\/easydmarc.com\/blog\/wp-json\/wp\/v2\/comments?post=15984"}],"version-history":[{"count":5,"href":"https:\/\/easydmarc.com\/blog\/wp-json\/wp\/v2\/posts\/15984\/revisions"}],"predecessor-version":[{"id":63414,"href":"https:\/\/easydmarc.com\/blog\/wp-json\/wp\/v2\/posts\/15984\/revisions\/63414"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/easydmarc.com\/blog\/wp-json\/wp\/v2\/media\/63412"}],"wp:attachment":[{"href":"https:\/\/easydmarc.com\/blog\/wp-json\/wp\/v2\/media?parent=15984"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/easydmarc.com\/blog\/wp-json\/wp\/v2\/categories?post=15984"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/easydmarc.com\/blog\/wp-json\/wp\/v2\/tags?post=15984"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}