---
type: "Glossary Term"
title: "What is DMARC? Policies and record | Roicool"
description: "What is DMARC? The DNS record that decides what happens to emails failing SPF and DKIM: the none, quarantine and reject policies, and reports."
url: "https://www.roicool.com/en/glossary/dmarc"
lang: "en"
dateModified: "2026-10-20"
resource: "https://www.roicool.com/en/glossary/dmarc"
alternates:
  tr: "https://www.roicool.com/sozluk/dmarc.md"
generated: { by: "process:roicool-cms", at: "2026-10-20T15:58:42.806Z" }
related:
  - { title: "SPF", resource: "https://www.roicool.com/en/glossary/spf.md" }
  - { title: "DKIM", resource: "https://www.roicool.com/en/glossary/dkim.md" }
  - { title: "Email deliverability", resource: "https://www.roicool.com/en/glossary/email-deliverability.md" }
  - { title: "Cold outreach", resource: "https://www.roicool.com/en/glossary/cold-outreach.md" }
  - { title: "Email deliverability", resource: "https://www.roicool.com/en/services/email-deliverability.md" }
  - { title: "Glossary", resource: "https://www.roicool.com/en/glossary.md" }
---

# What is DMARC?

DMARC (Domain-based Message Authentication, Reporting and Conformance) is an email authentication standard that lets a domain owner tell receiving servers what to do with emails that fail SPF or DKIM checks and are not aligned with the sender address, and receive authentication reports. It is published as a TXT record in the domain's DNS.

## In short

DMARC is a policy layer built on top of SPF and DKIM: those two authenticate the message, while DMARC requires the result to align with the visible From domain and says what should happen to messages that fail. It makes spoofing and phishing harder and supports deliverability; since February 2024, Gmail and Yahoo have required bulk senders to publish one. Most teams start at p=none, read the rua aggregate reports, and move to quarantine, then reject, once every legitimate sender is aligned.

## Key points

- DMARC is a policy standard that requires SPF or DKIM results to align with the visible sender domain.
- The record is published as a DNS TXT record at the \_dmarc subdomain.
- p=none only reports, p=quarantine sends mail to spam and p=reject refuses it.
- The rua tag sets the address that receives aggregate authentication reports.
- Since February 2024, Gmail and Yahoo have required a DMARC record from bulk senders.

## Policies

| Policy | What happens |
| --- | --- |
| `p=none` | Reported only |
| `p=quarantine` | Sent to the spam folder |
| `p=reject` | Rejected |

The DMARC record lives at `_dmarc.yourdomain.com`; the `rua` tag sets the address that receives aggregate reports. The recommended path is to start with `p=none` and tighten the policy once you have read the reports.

## Why it matters

It makes it harder for your domain to be used in spoofed emails. Since February 2024, Gmail and Yahoo have required a DMARC record from bulk senders. More detail: [What are DMARC, SPF and DKIM](https://www.roicool.com/en/blog/what-are-spf-dkim-dmarc), audit: [email deliverability](https://www.roicool.com/en/services/email-deliverability).

## Related terms

- [SPF](https://www.roicool.com/en/glossary/spf)
- [DKIM](https://www.roicool.com/en/glossary/dkim)
- [Email deliverability](https://www.roicool.com/en/glossary/email-deliverability)
- [Cold outreach](https://www.roicool.com/en/glossary/cold-outreach)

## Related service

- [Email deliverability](https://www.roicool.com/en/services/email-deliverability)

Breadcrumb: [Home](https://www.roicool.com/en) › [Glossary](https://www.roicool.com/en/glossary) › DMARC

Related pages:

- [Glossary](https://www.roicool.com/en/glossary)

Source: https://www.roicool.com/en/glossary/dmarc · Last updated: 2026-10-20