{"id":7491,"date":"2026-04-07T10:06:10","date_gmt":"2026-04-07T08:06:10","guid":{"rendered":"https:\/\/mybox.com\/help\/?post_type=manual_kb&#038;p=7491"},"modified":"2026-04-07T10:06:13","modified_gmt":"2026-04-07T08:06:13","slug":"what-is-a-dmarc-record","status":"publish","type":"manual_kb","link":"https:\/\/mybox.com\/help\/en\/knowledgebase\/what-is-a-dmarc-record\/","title":{"rendered":"What is a DMARC record?"},"content":{"rendered":"\n<div class=\"translation-block translation-block-merged\">\n<p class=\"wp-block-paragraph\">DMARC (Domain-based Message Authentication, Reporting, and Conformance) is a security protocol that builds upon your existing SPF and DKIM records. While SPF and DKIM verify your identity, DMARC tells receiving mail servers exactly what to do if an email fails those checks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">By default, domains registered or parked on <strong>mybox<\/strong> and delegated to our DNS servers already include DKIM and SPF records. Adding a DMARC record provides a more restrictive layer of protection, helping to prevent your outgoing mail from being treated as spam or used in phishing attempts.<\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_86 ez-toc-wrap-left counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/what-is-a-dmarc-record\/#How_it_works\" >How it works<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/what-is-a-dmarc-record\/#Distinction_Block\" >Distinction Block<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/what-is-a-dmarc-record\/#How_to_add_a_DMARC_record_in_mybox\" >How to add a DMARC record in mybox<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/what-is-a-dmarc-record\/#Practical_Implications\" >Practical Implications<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/mybox.com\/help\/en\/knowledgebase\/what-is-a-dmarc-record\/#Summary\" >Summary<\/a><\/li><\/ul><\/nav><\/div>\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_it_works\"><\/span>How it works<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<\/div>\n\n<div id=\"mybox-2969529253\" class=\"mybox-content mybox-entity-placement\"><div class=\"early-access-banner-inpost\">\r\n  <div class=\"banner-left-inpost\">\r\n    <div class=\"icon-box-inpost\">\r\n      <img decoding=\"async\" src=\"https:\/\/mybox.com\/help\/wp-content\/uploads\/2026\/02\/square-info-icon.svg\" alt=\"Info\">\r\n    <\/div>\r\n    <div class=\"text-box-inpost\">\r\n      <span class=\"label-inpost\"><span class=\"translation-block translation-block-banner-text\">Early access<\/span><\/span>\r\n      <h4><span class=\"translation-block translation-block-banner-text\">Still need help?<\/span><\/h4>\r\n      <p><span class=\"translation-block translation-block-banner-text\">Contact our customer service team.<\/span><\/p>\r\n    <\/div>\r\n  <\/div>\r\n\r\n  <div class=\"banner-right-inpost\">\r\n    <a href=\"https:\/\/panel.mybox.com\/helpdesk2\/v\/list\/\" class=\"banner-button-inpost\"><span class=\"translation-block translation-block-banner-text\">Message us<\/span><\/a>\r\n  <\/div>\r\n<\/div><\/div>\n\n<div class=\"translation-block translation-block-merged\"><p class=\"wp-block-paragraph\">DMARC allows you to set a policy for your domain. If an email claiming to be from you fails authentication, the receiving server follows your DMARC instructions:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>None (p=none):<\/strong> The message is delivered normally, but a report is generated. This is typically used for monitoring.<\/li>\n\n\n\n<li><strong>Quarantine (p=quarantine):<\/strong> The message is sent to the recipient&#8217;s spam folder.<\/li>\n\n\n\n<li><strong>Reject (p=reject):<\/strong> The message is blocked entirely.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Distinction_Block\"><\/span>Distinction Block<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>SPF\/DKIM vs. DMARC<\/strong> <strong>SPF and DKIM<\/strong> are like the ID cards for your email. <strong>DMARC<\/strong> is the instruction manual that tells the recipient&#8217;s server what to do if the ID card is missing or fake.<\/p>\n<\/blockquote>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_to_add_a_DMARC_record_in_mybox\"><\/span>How to add a DMARC record in mybox<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">You can add a DMARC record manually or use the built-in wizard in the <strong>mybox<\/strong> panel.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Method 1: Using the DMARC Wizard (Recommended)<\/strong><\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li>Log in to your <strong>mybox<\/strong> panel and go to the <strong>Domains<\/strong> section.<\/li>\n\n\n\n<li>Select your domain, go to the <strong>Parked<\/strong> tab, and click <strong>Manage DNS<\/strong>.<\/li>\n\n\n\n<li>In the <strong>Actions<\/strong> menu, select <strong>DMARC Wizard<\/strong>.<\/li>\n\n\n\n<li>Specify the policy action (None, Quarantine, or Reject) and enter your email address to receive reports.<\/li>\n\n\n\n<li>Click <strong>Add<\/strong>.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Method 2: Manual Entry<\/strong> If you have generated a custom record using a tool like <a target=\"_blank\" rel=\"noreferrer noopener\" href=\"https:\/\/mxtoolbox.com\/DMARCRecordGenerator.aspx\">MXToolbox<\/a>, you can add it as a TXT record:<\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li>In the <strong>Manage DNS<\/strong> section of your domain, click <strong>+Add record<\/strong>.<\/li>\n\n\n\n<li><strong>Name:<\/strong> <code>_dmarc<\/code> (must be lowercase).<\/li>\n\n\n\n<li><strong>Type:<\/strong> <code>TXT<\/code>.<\/li>\n\n\n\n<li><strong>Value:<\/strong> Paste your DMARC string (e.g., <code>v=DMARC1; p=none; rua=mailto:admin@yourdomain.com<\/code>).<\/li>\n\n\n\n<li><strong>TTL:<\/strong> <code>900s<\/code> (default).<\/li>\n\n\n\n<li>Click <strong>+Add DNS record<\/strong>.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Practical_Implications\"><\/span>Practical Implications<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Monitoring First:<\/strong> It is highly recommended to start with a <code>p=none<\/code> policy. This allows you to receive reports and verify that your legitimate mail is authenticating correctly before moving to a stricter &#8220;Reject&#8221; policy.<\/li>\n\n\n\n<li><strong>Reporting:<\/strong> The <code>rua<\/code> tag in your record directs the server to send aggregate reports to your email. These reports help you identify if any unauthorized servers are trying to send mail using your domain.<\/li>\n\n\n\n<li><strong>Propagation Time:<\/strong> Like all DNS changes, it can take up to <strong>24 hours<\/strong> for a new DMARC record to propagate across the internet.<\/li>\n\n\n\n<li><strong>Consistency:<\/strong> Ensure your SPF and DKIM records are healthy before adding DMARC, as DMARC relies entirely on the success of those two checks.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Summary\"><\/span>Summary<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A DMARC record is the final piece of the email authentication puzzle for your <strong>mybox<\/strong> domain. By defining clear rules for how external servers should handle your mail, you protect your brand&#8217;s reputation and significantly improve the deliverability of your messages.<\/p>\n<\/div>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"template":"","format":"standard","manualknowledgebasecat":[41],"manual_kb_tag":[],"class_list":["post-7491","manual_kb","type-manual_kb","status-publish","format-standard","hentry","manualknowledgebasecat-email"],"_links":{"self":[{"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manual_kb\/7491","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manual_kb"}],"about":[{"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/types\/manual_kb"}],"author":[{"embeddable":true,"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/users\/1"}],"version-history":[{"count":1,"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manual_kb\/7491\/revisions"}],"predecessor-version":[{"id":7492,"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manual_kb\/7491\/revisions\/7492"}],"wp:attachment":[{"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/media?parent=7491"}],"wp:term":[{"taxonomy":"manualknowledgebasecat","embeddable":true,"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manualknowledgebasecat?post=7491"},{"taxonomy":"manual_kb_tag","embeddable":true,"href":"https:\/\/mybox.com\/help\/en\/wp-json\/wp\/v2\/manual_kb_tag?post=7491"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}