DMARC record missing

Check id: dmarc.missing · fix effort: low

What it means

Your domain has no DMARC policy, so nothing tells mail servers what to do with forged mail using your name. It just gets delivered. For a small business this is the single most important email record to add.

The technical detail

No v=DMARC1 TXT at _dmarc. Without DMARC there's no alignment enforcement and no reporting. SPF and DKIM alone don't stop direct-domain spoofing.

How to fix it

1. Start in monitoring mode: publish v=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.com at _dmarc.yourdomain.com.
2. Review aggregate reports for 2–4 weeks to find all legitimate senders.
3. Move to p=quarantine, then p=reject.
4. For domains that never send mail, go straight to v=DMARC1; p=reject; sp=reject.