All questions
Q & A Email Auth · August 18, 2026

Do I need DMARC if I already have SPF and DKIM?

Yes. SPF checks the envelope sender. DKIM signs the message. Neither by itself protects the From: header — the address users actually see. DMARC is what ties SPF/DKIM results to the From: header and specifies what happens when they don’t match. Without DMARC, a spoofed From: address can pass SPF/DKIM checks on the envelope while the visible sender address is forged.

Read the full guide
What Is DMARC? How It Stops Email Spoofing
DMARC is the enforcement layer of email authentication. SPF and DKIM do the checking — DMARC tells receiving servers what to do when they fail, and reports back to you who's sending email using your domain.
Related questions
Does Cloudflare proxy break DMARC? How do I set up DMARC for Google Workspace? How do I set up DMARC for Microsoft 365? How do I verify my Mailchimp DMARC alignment? How do I verify my SendGrid DMARC alignment?