DMARC at p=none: how to move to enforcement
A DMARC policy of p=none only reports forged email — it stops nothing. It is a fine first step, but while it stays, forged email in your name still reaches people.
Move to quarantine first, and to reject only once the reports show all your real senders pass.
How to fix it
DNS registrar
Where: your DNS provider — edit the TXT record at _dmarc
Type: TXT Name: _dmarc Value: "v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com"
p=none only reports spoofed mail. Once the reports show your real senders pass, move to p=quarantine, then p=reject.
How to confirm: Check with mxtoolbox.com/dmarc after ~10 minutes.
Not sure your site needs this fix? A scan checks this and dozens of other things and shows what yours is missing.
Scan your site free