All questions
Q & A Email Auth · August 18, 2026

What is DMARC alignment?

DMARC alignment requires that the domain in the From: header matches either the SPF envelope sender domain or the DKIM signing domain. Strict alignment requires an exact match. Relaxed alignment (default) allows organizational domain matching — subdomain.example.com aligns with example.com. A message passes DMARC if it passes SPF alignment OR DKIM alignment (not necessarily both).

Read the full guide
What Is DMARC? How It Stops Email Spoofing
DMARC is the enforcement layer of email authentication. SPF and DKIM do the checking — DMARC tells receiving servers what to do when they fail, and reports back to you who's sending email using your domain.
Related questions
Do I need DMARC if I already have SPF and DKIM? Does Cloudflare proxy break DMARC? How do I set up DMARC for Google Workspace? How do I set up DMARC for Microsoft 365? How do I verify my Mailchimp DMARC alignment?