How to add a DMARC record to your domain
DMARC tells mail servers what to do with email that claims to be from your domain but fails SPF and DKIM: reject it, send it to spam, or just report it to you. Without DMARC, phishing in your name is delivered like any other email.
If you are not sure every system that sends for you is set up correctly, start with p=none for two weeks, read the reports that reach the rua address, then move to p=quarantine and p=reject.
How to fix it
DNS registrar
Where: your DNS provider — add a TXT record at _dmarc
Type: TXT Name: _dmarc Value: "v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com"
DMARC stops attackers spoofing your domain in email. Start with p=quarantine, move to p=reject once clean.
How to confirm: Check with mxtoolbox.com/dmarc after ~10 minutes.
Not sure your site needs this fix? A scan checks this and dozens of other things and shows what yours is missing.
Scan your site free