# What is DMARC?

DMARC, short for Domain-based Message Authentication, Reporting and Conformance, is a published rule that tells other mail servers how to treat messages claiming to come from your domain. It builds on two older checks: SPF, which says which servers may send for the domain, and DKIM, which signs messages. A message passes DMARC when at least one of these checks succeeds and matches the domain in the From line, which is what the reader actually sees. The policy can be none (just report), quarantine (send failures to spam) or reject (refuse them). DMARC also sends you aggregate reports listing every source that sent mail in your name, which is often the first time a company sees all its forgotten senders. On its own it does not stop phishing in general, because attackers simply use a different, similar-looking domain. But it closes the easiest door: exact impersonation of your own address.

FAQ: [Phishing and e-mail aftermath](https://netsenx.com/en/faq/phishing) · https://netsenx.com/en/faq/what-is-dmarc

## Read next

- https://netsenx.com/en/is-someone-inside-your-network
- https://netsenx.com/en/what-is-ndr

## Related questions

- [What is MFA fatigue?](https://netsenx.com/en/faq/what-is-mfa-fatigue)
- [Can phishing get past multi-factor authentication?](https://netsenx.com/en/faq/can-phishing-bypass-multi-factor-authentication)
- [Does a password reset end a mailbox takeover?](https://netsenx.com/en/faq/does-a-password-reset-end-a-mailbox-takeover)
- [What are deepfake CEO calls, and how do we protect against them?](https://netsenx.com/en/faq/what-are-deepfake-ceo-calls)
- [What is a fake CAPTCHA or ClickFix attack?](https://netsenx.com/en/faq/what-is-a-fake-captcha-clickfix-attack)