Check more than isolated SPF and DKIM passes
DMARC requires alignment between an authenticated domain and the visible sender domain. A service passing SPF for its own infrastructure does not automatically pass DMARC for your From address. Inspect real headers to see the domains involved.
Change policy using evidence
Publish at the prescribed _dmarc host. Choose an initial monitoring and reporting setup appropriate to the plan, fix legitimate senders and increase enforcement only after validation. Ensure reports are actually processed by a responsible person or service.
Your practical checklist
- Inventory legitimate senders.
- Check alignment in real headers.
- Set up actionable reporting.
- Increase enforcement gradually.
A useful question
Does DMARC guarantee delivery?
No. It supports authentication policy; content, reputation and other receiver checks still matter.
Ready to check your name? Start with the exact domain, then compare alternatives. Find a domain →
Sources & further reading
Original guide by chname.ch editorial. Archive dates organise this library; this guide was created and reviewed on . Provider and registry instructions take precedence when requirements change.