What is DMARC, in plain terms?
A DNS record that tells receiving mail servers what to do with messages that claim to come from your domain but fail its checks. At its strongest setting (reject), mail forged in your name is refused before it reaches anyone. DMARC works alongside SPF, which lists the servers allowed to send for you, and DKIM, which signs your messages.
Do I need this if my email is on Google Workspace or Microsoft 365?
Yes. DMARC is set on your domain, not inside your mailbox provider, and most businesses send from more than one place: their mail provider, a website contact form, an accounting system, a newsletter tool. Each of those has to be authenticated for DMARC enforcement to be safe. We work with Google Workspace, Microsoft 365, Zoho, Tremhost email and other providers.
Why not just publish a DMARC record myself?
You can, and a record set to p=none costs nothing. It also stops nothing: p=none only reports. Moving to quarantine or reject is where the protection is, and it is also where legitimate mail gets blocked if one sending system was missed. We read the reports, find every system that sends as you, fix them, and only then tighten the policy.
Can you guarantee my mail reaches the inbox?
No, and nobody honestly can. Inbox placement also depends on what you send, who you send it to and how recipients react. What we remove is the technical reasons for rejection: missing or broken SPF, DKIM and DMARC, unaligned senders and blocklisted sending addresses that we can get delisted.
How long until my domain is fully protected?
Typically six to ten weeks to reach a reject policy, because we wait for enough report data to be sure no legitimate sender is caught. Domains with few sending systems can move faster. You see each step before we make it.
What do you need from me?
Access to change your domain's DNS records (or your domain on Tremhost DNS), a list of the tools that send email for you, and someone who can make changes inside those tools when they need a DKIM key added.
Is this the same as Armor Mail?
No. This service stops other people sending email that pretends to come from your domain, and helps your own mail get delivered. Armor Mail protects your staff from phishing and fake invoices arriving in their inboxes. Many organisations use both.
What happens if one of our mailboxes is hacked and starts sending spam?
We help you stop the sending, tell you which account is involved and what to change, and request removal from the blocklists that listed you. Rotating passwords and cleaning affected devices stays with you or your IT provider.