dmarcula

Getting started.

From zero to your first DMARC report in about five minutes, then dmarcula does the watching. Here's the whole path, start to finish.

Flow diagram: your domain publishes a DMARC record; mailbox providers send daily aggregate reports to dmarcula, which shows them on your dashboard.
How DMARC reports reach dmarcula.

You'll add exactly one DNS record. That's the only change you make to your domain, and on day one it's monitor-only, so it can't affect how a single email is delivered.

1. Create your account

Sign up with your work email. If signups are paused, you'll land on the waitlist instead. We onboard new domains a few at a time to keep the free tier fast, and we'll email you the moment a spot opens up.

2. Connect your domain

There are two ways in:

  • Microsoft 365 (one-click). Connect your Microsoft 365 tenant and we'll detect the domains you've already verified with Microsoft, so you can pick the one to monitor without typing anything.
  • Any other provider (manual). Not on Microsoft 365? Just enter your domain name. Google Workspace, Fastmail, your own mail server, anything at all. DMARC is provider-agnostic, and so are we.

3. Add one DNS record

This is the only change you make to your domain. We hand you a ready-made DMARC TXT record. Copy it, or email it straight to whoever manages your DNS. It looks like this:

Host
_dmarc.yourdomain.com
Type
TXT
Value
v=DMARC1; p=none; rua=mailto:dmarc-xxxxxxxx@dmarcula.com

Two parts matter here. The rua= address is your private dmarcula inbox. It tells the world's mailbox providers where to send their DMARC aggregate reports. The p=none means monitor only: you're asking for reports, not changing how anything is delivered. Nothing about your email changes today.

Add it wherever your DNS lives. Cloudflare, Route 53, Simply, GoDaddy, and the rest all work the same way. Not sure who manages DNS for your domain? Your IT lead or hosting provider will know, or use the Send to my DNS admin button in the app. We check for the record automatically. Usually within a minute you'll see DMARC flip to verified.

4. Wait for the first reports

This is the one part you can't rush. Mailbox providers (Google, Microsoft, Yahoo, and the rest) send their aggregate reports on their schedule, usually once a day. So your first real data typically lands within 24–72 hours. There's nothing more to do but let it roll in.

5. Read your dashboard

Once reports arrive, your dashboard shows who's sending email as your domain, how much of it passes authentication, and anything that needs a closer look. From there, dmarcula keeps watching and nudges you forward when it's safe to tighten your policy.

What's next

Once your first reports land: