What is the difference between SPF, DKIM and DMARC?

SPF verifies IP addresses, DKIM adds a digital signature, and DMARC acts as the instruction manual for the recipient.

Why does my business need DMARC?

DMARC protects against email spoofing and phishing and ensures your domain is not abused for fraud.

Can DMARC stop all spam?

DMARC stops spoofing of your own domain, but it is not a general spam filter.

What happens if I set up DMARC incorrectly?

An incorrect setup can block legitimate emails, which is why you start with p=none.

Do I need DMARC if I use Microsoft 365?

Yes. It is essential to ensure that your Microsoft 365 emails are delivered correctly.

What do the DMARC policies p=none, p=quarantine and p=reject mean?

p=none is monitoring, p=quarantine sends suspicious emails to spam, and p=reject rejects them completely.

What is DMARC? A guide to email security

At a time when email fraud is becoming more sophisticated, DMARC is an indispensable tool for every business. But what is DMARC exactly, and why should you prioritise it?

What exactly is DMARC?

DMARC stands for Domain-based Message Authentication, Reporting, and Conformance. It is a security protocol that acts as a filter for your email traffic. It ensures that the recipient of an email can verify that the sender really is who they claim to be, and not a hacker trying to impersonate you.

How does DMARC work together with SPF and DKIM?

DMARC does not work on its own; it builds on SPF and DKIM:

SPF (Sender Policy Framework): Lists the IP addresses that are allowed to send emails on your behalf.
DKIM (DomainKeys Identified Mail): Adds a digital signature that ensures the email has not been altered in transit.
DMARC: Is the "instruction manual" that tells the recipient's server what to do if SPF or DKIM fails.

Why is DMARC necessary for your business?

Without DMARC it is easy for criminals to send fake emails from your domain – a method known as email spoofing. This can lead to phishing attacks on your customers or partners, damaging your company's reputation. By implementing DMARC you build trust and ensure that your legitimate emails reach the recipient.

How to get started with DMARC

DNS setup: Setting up DMARC requires changes to your DNS configuration.
Start gently: It is always recommended to start with a "p=none" policy. This is known as monitoring mode, where you can collect reports on your email traffic without blocking any emails.
Tighten the policy: Once you have the overview, the policy can be tightened to "quarantine" (spam) or "reject" (rejection).

Get help with your email security

Do you need help securing your email domain correctly? An incorrect DMARC configuration can result in your own important business emails being blocked. Contact Teknisk Support today for professional advice on DMARC, Microsoft 365, spam filtering and general IT security.