DMARC Policy Warning: How to Fix It Without Losing MailDMARC Policy Warning: How to Fix It Without Losing Mail
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
DMARC policy not enabled: what the warning means, and how to fix it without losing real mail.
Checkers show this warning when your domain has no DMARC record, or when the record says p=none. p=none asks receivers to send you reports and change nothing: mail that fails SPF and DKIM is still delivered.
You're in good company. I ran my email-auth-checker today: Gmail's own domain and Outlook's both publish p=none (with sp=quarantine for subdomains). Yahoo's is at p=reject.
Why so many stop there: Google's sender guidelines for 5,000+ messages a day say "Your DMARC enforcement policy can be set to none." That gets your mail accepted. It doesn't stop anyone from sending as you.
How to fix it without breaking anything • Keep p=none for a few weeks with a rua= address, and read the aggregate reports. • List every service that sends as you: mailbox, newsletter tool, CRM, invoicing, the shop. Each must pass SPF or DKIM on a domain that matches your From: address. That's alignment. • Move to p=quarantine, then p=reject once the reports are clean. • If rua= points to another domain, that domain has to publish an authorization record, or receivers send nothing. • Ramping up with pct=20? RFC 9989 (May 2026) retired pct. The testing switch is now t=y.
Which sender showed up in your reports that you'd forgotten about?
Post image
Back to feed
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started