02
- Home
- DMARC
DMARC
What is DMARC?
DMARC (Domain-based Message Authentication, Reporting & Conformance) is an email authentication protocol designed to protect your domain from spoofing, phishing, and other email-based cyberattacks.
It builds on two existing technologies DKIM and SPF. By combining them, and adding policy enforcement and reporting, DMARC helps ensure only legitimate emails are sent from your domain.
01
DKIM (DomainKeys Identified Mail)
What kind of threats does it protect against?
DMARC protects against exact-domain spoofing attacks, where attackers forge the “From:” email address to make it appear as if the message is coming from your organization.
Without DMARC, malicious actors can use your domain to steal sensitive information such as login credentials and personally identifiable information (PII).
What is DKIM?
DKIM (DomainKeys Identified Mail) adds a digital signature to each email, allowing recipients to verify that the email hasn’t been tampered with and confirming the sender’s identity.
What is SPF?
SPF (Sender Policy Framework) is an email authentication method that defines which mail servers are authorized to send emails on behalf of your domain.
How does DKIM work?
DKIM uses cryptographic key pairs
Public Key: Published in your domain’s DNS and available to mail providers.
Private Key: Stored securely on your outgoing mail server.
How the process works
The private key signs are parts of the email (headers and body).
1
If the signature matches, the email is authenticated.
2
The recipient server retrieves the public key to verify the signature.
3
Think of it like signing a credit card receipt — the signature proves your identity!
So, how does DMARC build on SPF and DKIM?
SPF and DKIM alone cannot verify the header From: address — the one user actually see. DMARC introduces a concept called “alignment”, which ensures that the domain used in SPF or DKIM matches the visible “From:” domain.
Additionally, DMARC provides reporting in the form of XML files that help you monitor email activity across the internet.
Not a fan of XML? Tools like PowerDMARC convert raw data into simple, visual dashboards to help you act quickly.
