How to set up DMARC for Google Workspace
Set up SPF, DKIM and DMARC for a Google Workspace domain: the SPF record, generating a 2048-bit DKIM key in the Admin console, timing, and the DMARC record.
Read postHow to set up DMARC for Microsoft 365
Set up SPF, DKIM and DMARC for a Microsoft 365 domain: the exact records, where to turn on DKIM, the onmicrosoft.com domain, and how Microsoft treats p=reject.
Read postDoing DMARC yourself vs using a service: what you actually save
An honest look at DMARC by hand versus a monitoring service, across reading reports, spotting alignment failures, deciding when to tighten, and time cost.
Read postWhy most DMARC projects stall at p=none, and how to get unstuck
DMARC projects rarely fail loudly. They stall quietly at p=none because nobody parses the reports or owns the next step. Here is why, and how to fix it.
Read postFrom p=quarantine to p=reject without blocking real mail
How to tighten a DMARC policy in stages: move to p=quarantine, watch the reports, use t=y to test, and only reach p=reject once nothing legitimate is failing.
Read postStart with p=none: audit your email before you enforce
Before you block a single message, publish p=none and collect a few weeks of DMARC reports. Here is what p=none does, and what the first reports tell you.
Read post