What is DMARC and how do I implement it?
How to implement DMARC correctly
Before we dive into the implementation process it is good to understand what it is!
DMARC (domain-based messaging authentication reporting and conformance) is an email authentication technology that is essentially a shield for your emails, making sure that the only emails you receive are legitimate, safeguarding your business from potential phishing attacks! DMARC works by telling the email provider how to handle emails that claim to be from your domain. It instructs the provider on what to do with it: whether to deliver, quarantine, or reject the message.
Before you can add DMARC, you will need a couple of security measures in place:
SPF: Defines which mail servers can send emails to your domain.
DKIM: Ensures email authenticity with digital signatures.
Â
The image below explains this process in more detail:
How to implement DMARC?
Tip: If you’re unsure about the set up process, consult your IT provider, they can configure it correctly and help monitor its effectiveness.
This is an example of how to create a simple DMARC Record:
The record is a small piece of text that goes in your domains DNS settings.
Here is a basic record example: v=DMARC1; p=none; rua=mailto:youremail@yourdomain.com
Add the DMARC record to your DNS:
Login to your domain host control panel for example GoDaddy.
Find your DNS settings/DNS record
Add the TXT record:
Hostname: _dmarc
Type: TXT
Value: paste the DMARC record
TTL: Default
Make sure to save the changes.
Implementing DMARC is a very important step in securing your business email and protecting it from Phishing attacks! By setting it up correctly, you gain better security over your email and defend yourself from unauthorised senders. If you are unsure about making these changes yourself make sure to consult with your IT provider to ensure you are set up correctly! Get in contact with a member of the Liberate Team today for expert guidance. Rules around DMARC are changing to find out more see our previous blog.