DMARC quick wins

Email spoofing hurts both security and reputation.

The order matters

1. SPF: list allowed senders
2. DKIM: sign outbound mail
3. DMARC: enforce alignment + reporting

Start with monitoring

• Set DMARC policy to none
• Collect reports for at least 1–2 weeks
• Fix legit senders you forgot (CRM, invoices, marketing tools)

Then enforce

Move gradually:

• quarantine → reject

If you want us to audit your domain mail posture, /en/consultation