Back to Domain Verification
DMARC
Domain Security

DMARC Policy

PostFrame generates a starter DMARC record for your domain — p=none with aggregate reports to an address you own — and checks it alongside SPF and DKIM. Tighten it to quarantine or reject once the reports look clean.

Start freeDomain verification overview

Policy and Reporting

Policy enforcement
Choose none, quarantine or reject for mail that fails authentication — PostFrame's generated record starts at p=none so nothing legitimate is dropped while you review reports
Aggregate reports
Receiving servers send XML reports to the rua address in your record, so you can see every server sending as your domain
Alignment checking
DMARC verifies that the From domain aligns with SPF and DKIM domains — preventing sophisticated spoofing
Gradual enforcement
Start with p=none to monitor, move to quarantine, then reject as you gain confidence in your authentication
DMARC Record
Record type
TXT
Host
_dmarc.yourdomain.com
Generated record
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com
Required for verification?
No — recommended. The check still reports found, missing or mismatch

Keep exploring PostFrame

SPF record

The include directive PostFrame asks you to publish.

Open SPF record

DKIM signing

Three CNAMEs and a 2048-bit signing key.

Open DKIM signing

Domain verification

The whole guided setup, record by record.

Open Domain verification

Questions

Common questions, straight answers.

Is DMARC required to verify a domain?

No. Verification requires the ownership TXT record, the three DKIM CNAMEs, the SPF record and the bounce-domain MX and SPF. DMARC is listed as recommended and checked the same way.

Which policy should I start with?

p=none. It changes nothing about delivery and gets you the aggregate reports. Move to quarantine, then reject, once the reports show only senders you recognize.

Where do the DMARC reports go?

To the mailbox named in the rua= tag of your record — an address you own. PostFrame generates the record but does not read the reports.

How does PostFrame keep SPF aligned for DMARC?

It sets a custom bounce domain (bounce.yourdomain.com) with its own MX and SPF records, so the envelope sender is on your domain and SPF alignment passes.

Run your business from one place.

Five plans, seventeen launch apps, one dashboard. Set up in under 5 minutes — change tiers any time.

Start free$0 forever • No card • Upgrade any timeTalk to Sales

From $0 · Basic $9.95/mo · Save 20% on annual billing · Upgrade or downgrade any time