All questions
Q & A Email Authentication · August 21, 2026

My domain doesn't send email. Do I still need DMARC?

Yes — especially if you don’t send email. Without DMARC, anyone can forge your domain in the ‘From:’ address of phishing emails, and there’s nothing technically stopping them. Add a DMARC record with p=reject to block your domain from being used in spoofing campaigns. Even a ‘parked’ domain should have DMARC.

Read the full guide
How to Add a DMARC Record (Step-by-Step for Any Domain)
DMARC is the one record that stops your domain from being used in phishing attacks. This guide covers creating your first record, understanding the tags, reading aggregate reports, and moving from p=none to p=reject safely.
Related questions
DMARC reports are XML. How do I read them? How long until I receive my first DMARC report? What's the difference between p=none, p=quarantine, and p=reject?