Getting Started Guide
Add your domain, publish one DNS record, and DMARCsimple starts collecting authentication data automatically. Most teams are looking at their first reports within 24 to 48 hours.
Step 1: Add Your Domain
After signing in to DMARCsimple, add the first domain you want to monitor:
- Enter the domain exactly as it appears in your From addresses (e.g.,
example.com) - Add the organizational domain, not a subdomain - DMARC at the organizational level covers subdomains by default
- Repeat for each additional domain your organization sends from
Once the domain is added, DMARCsimple generates a unique reporting address (the rua address) where receiving mail servers will send aggregate reports for that domain.
Step 2: Publish Your DMARC Record
DMARCsimple provides the exact DNS record to publish. In your DNS provider, create a TXT record:
- Host/Name:
_dmarc(so the full name is_dmarc.example.com) - Type: TXT
- Value: the record shown in your dashboard, for example:
v=DMARC1; p=none; rua=mailto:example.com@reports.dmarcsimple.com
The two parts that matter most at this stage:
p=nonetells receiving servers to take no action on failing mail - you are only collecting data, so nothing about your delivery changes- The
ruatag tells receivers where to send aggregate reports - use the address DMARCsimple provided so reports flow into your dashboard automatically
Copy the value exactly as provided. A typo in the rua address means reports go nowhere.
Step 3: Verify the DNS Record
After saving the record at your DNS provider:
- Click Verify on the domain in DMARCsimple - it performs a live DNS lookup of
_dmarc.example.com - If verification fails, wait for DNS propagation - changes can take minutes to a few hours depending on your provider and TTL settings
- Confirm there is only one DMARC record at
_dmarc- multiple records cause DMARC to fail entirely
You can also check manually with a command like nslookup -type=txt _dmarc.example.com or any online DNS lookup tool.
Step 4: Your First Reports (24-48 Hours)
Receiving mail servers such as Google, Microsoft, and Yahoo generate aggregate reports on a daily cycle. That means:
- Expect the first reports to arrive within 24 to 48 hours of publishing the record
- Reports only arrive for domains that actually receive mail claiming to be from you - low-volume domains may take longer to show data
- DMARCsimple parses the raw XML automatically and builds your sending source dashboard
Once data arrives, you will see every IP and service sending email as your domain, along with SPF and DKIM authentication results for each.
Next Steps
With monitoring in place, the typical path forward looks like this:
- Review the record details and SPF/DKIM prerequisites in Initial Setup
- Learn to interpret your dashboard in Reading Reports
- Fix authentication for legitimate senders, then move toward enforcement with Policy Progression
- If something is not working, see Troubleshooting