Getting started.
From zero to your first DMARC report in about five minutes, then dmarcula does the watching. Here's the whole path, start to finish.
You'll add exactly one DNS record. That's the only change you make to your domain, and on day one it's monitor-only, so it can't affect how a single email is delivered.
1. Create your account
Sign up with your work email. If signups are paused, you'll land on the waitlist instead. We onboard new domains a few at a time to keep the free tier fast, and we'll email you the moment a spot opens up.
2. Connect your domain
There are two ways in:
- Microsoft 365 (one-click). Connect your Microsoft 365 tenant and we'll detect the domains you've already verified with Microsoft, so you can pick the one to monitor without typing anything.
- Any other provider (manual). Not on Microsoft 365? Just enter your domain name. Google Workspace, Fastmail, your own mail server, anything at all. DMARC is provider-agnostic, and so are we.
3. Add one DNS record
This is the only change you make to your domain. We hand you a ready-made DMARC TXT record. Copy it, or email it straight to whoever manages your DNS. It looks like this:
- Host
- _dmarc.yourdomain.com
- Type
- TXT
- Value
- v=DMARC1; p=none; rua=mailto:dmarc-xxxxxxxx@dmarcula.com
Two parts matter here. The rua= address is
your private dmarcula inbox. It tells the world's mailbox providers where to send their DMARC
aggregate reports. The
p=none means
monitor only: you're asking for reports, not changing
how anything is delivered. Nothing about your email changes today.
Add it wherever your DNS lives. Cloudflare, Route 53, Simply, GoDaddy, and the rest all work the same way. Not sure who manages DNS for your domain? Your IT lead or hosting provider will know, or use the Send to my DNS admin button in the app. We check for the record automatically. Usually within a minute you'll see DMARC flip to verified.
4. Wait for the first reports
This is the one part you can't rush. Mailbox providers (Google, Microsoft, Yahoo, and the rest) send their aggregate reports on their schedule, usually once a day. So your first real data typically lands within 24–72 hours. There's nothing more to do but let it roll in.
5. Read your dashboard
Once reports arrive, your dashboard shows who's sending email as your domain, how much of it passes authentication, and anything that needs a closer look. From there, dmarcula keeps watching and nudges you forward when it's safe to tighten your policy.
What's next
Once your first reports land:
- Reading your dashboard: make sense of what shows up.
- The enforcement journey: move safely from
p=nonetop=rejectwhen you're ready. - Or jump straight into your dashboard.