How to use it
- Read the record:
dig +short TXT _dmarc.example.com. - Paste it and check the policy grade before the syntax findings.
- If you are at p=none, publish a rua address and read reports for two weeks before tightening.
- Move p=none → p=quarantine → p=reject, confirming pass rates hold at each step.
Frequently asked questions
Why is my valid record still scored low?
The score grades protection, not syntax. p=none is valid and stops nothing, so it costs points until you reach enforcement.
Do I need sp=?
Only to differ from p. Subdomains inherit p when sp is absent, so an explicit sp=none under p=reject silently leaves every subdomain spoofable.
What does DMARC need for BIMI?
A policy of quarantine or reject at pct=100 with subdomains covered. The analyser reports BIMI eligibility directly.