What is a DMARC record and why is it useful?

DMARC (Domain-based Message Authentication, Reporting and Conformance) is a TXT-type DNS record that tells email servers what to do when a message fails SPF or DKIM checks: deliver it anyway, send it to spam, or reject it outright. It can also be configured to send periodic reports listing emails sent "on behalf of" your domain, useful for spotting phishing attempts that impersonate your brand.

DMARC works together with SPF and DKIM (another authentication method, based on a cryptographic signature) — it doesn't replace them, it uses them as the basis for its decision.

A well-configured DMARC policy significantly reduces the risk of someone sending fake emails pretending to come from your domain. It's added as a TXT record in the DNS zone, usually at _dmarc.yourdomain.ro.