Quick Answer
What does the DMARC Record Wizard help you configure?
The DMARC Record Wizard walks you through the key decisions needed to create a DMARC record, including the policy level, reporting addresses, identifier alignment, subdomain policy, and rollout percentage.
Protecting Your Domain From Email Spoofing and Abuse
You may be sending emails from your domain, but without proper authentication, others can misuse it.
DMARC helps verify legitimate senders and gives you control over how unauthorized emails are handled.
Without this protection, your domain could be used for spoofing, which can damage deliverability and trust.
The DMARC Record Wizard helps you generate a valid record by guiding you through policy settings, reporting addresses, alignment choices, and rollout percentage.
Start With Monitoring
A safer rollout is to begin with p=none for monitoring, review the reports, and then move to quarantine or reject once you are confident legitimate sending is authenticating correctly.
DMARC Setup at a Glance
Before You Begin
Review your sending setup before moving toward stricter DMARC enforcement.
- Make sure SPF and DKIM are configured correctly before moving to quarantine or reject.
- Decide which email address should receive aggregate DMARC reports.
- Consider using a dedicated mailbox for reports so XML reports do not overwhelm your main inbox.
Steps to Use the DMARC Record Wizard
Work through each setting in the Wizard, then publish the generated record in your domain’s DNS.
Step 1: Enter Your Domain
Enter the domain you want to protect.
Step 2: Select a DMARC Policy
Choose none for monitoring, quarantine to send unauthorized mail to spam, or reject to block unauthorized mail.
Step 3: Add an Aggregate Reporting Address
Enter the email address that should receive DMARC XML reports with information about mail being sent on behalf of your domain.
For example:
[email protected]
Step 4: Add Failure Reporting if Needed
Optionally enter a forensic reporting email address if you want more detailed information about authentication failures.
Step 5: Choose Identifier Alignment
Choose Relaxed if subdomain matches are allowed, or Strict when an exact domain match is required.
Identifier Alignment checks whether the domain shown in the From header aligns with SPF and DKIM authentication.
Step 6: Configure the Subdomain Policy
If needed, apply a separate DMARC policy to subdomains. Otherwise, allow them to inherit the main domain’s policy.
Step 7: Set the Policy Percentage
Choose what percentage of your email traffic the policy should apply to. This lets you introduce enforcement gradually rather than applying it to all traffic at once.
Step 8: Apply the Generated Record
Copy the DMARC record generated by the Wizard and add it to your domain’s DNS settings as a TXT record.
Use a Dedicated Reporting Mailbox
A dedicated mailbox for DMARC reports helps keep XML reports out of your main inbox and makes them easier to review over time.
Best Practices
Start With None
Begin with a none policy so you can monitor authentication results before enforcing quarantine or rejection.
Confirm SPF and DKIM
Keep SPF and DKIM configured correctly before increasing DMARC enforcement.
Review Aggregate Reports
Review the reports regularly to identify unauthorized sending sources and see how legitimate mail is authenticating.
Increase Enforcement Gradually
Increase the policy percentage as you confirm that legitimate senders are aligned correctly.
Quick Sanity Check
If legitimate emails are failing DMARC, a sender may not be aligned correctly with SPF or DKIM, or the From domain may not match the authenticated sending domain.
Why DMARC Matters
DMARC helps prevent spoofing and provides visibility into who is sending mail on behalf of your domain.
Monitoring first gives you a chance to identify legitimate and unauthorized sending sources before you tighten enforcement.
BizStackPro helps you manage domains, sending, and automation so your email setup can remain consistent as your sending activity grows.
Frequently Asked Questions
What is the DMARC Record Wizard, and how does it help?
The DMARC Record Wizard helps users create a DMARC record by guiding them step-by-step through the setup, making it easier to prevent abuse and gain insights into email authentication.
How do I start creating a DMARC record using the Wizard?
Enter your domain name in the first step of the wizard to begin creating the DMARC record.
What are the DMARC policy options?
The policy options include none (monitor only), quarantine (send unauthorized emails to spam), and reject (block unauthorized emails).
Where do I enter my email address for DMARC reports?
You enter your address in the Aggregate Reporting step. This address will receive DMARC XML reports with insights about emails sent on behalf of your domain.
What is Identifier Alignment in DMARC?
Identifier Alignment ensures the domain in the From header aligns with SPF and DKIM. Relaxed allows subdomain matches, while Strict requires exact matches.
Can I set separate DMARC policies for subdomains?
Yes, you can apply different policies for subdomains or inherit the main domain’s policy.
What does the Policy Percentage option do?
It lets you apply DMARC to only a portion of your traffic to roll it out gradually.
How do I apply the DMARC record after using the Wizard?
Copy the generated DMARC record and add it to your domain’s DNS settings through your hosting provider.
Continue Learning
Continue with related email-authentication guides for DMARC and sending-domain setup.
