---
title: What Is DMARC and How to Stop People Spoofing Your Company Email, Step by Step
description: "**In short**DMARC is a record you add to your domain’s DNS that tells mail servers such as Gmail and Outlook what to do with a message claiming to be from your domain that fails SPF or DKIM: accept it, send…"
url: "https://www.hyyat.com/en/knowledgebase/what-is-dmarc/"
updated: "2026-10-22"
category: Website Security
---

# What Is DMARC and How to Stop People Spoofing Your Company Email, Step by Step

**In short**DMARC is a record you add to your domain’s DNS that tells mail servers such as Gmail and Outlook what to do with a message claiming to be from your domain that fails SPF or DKIM: accept it, send it to spam, or reject it. This stops fraudsters sending messages in your company’s name, and improves delivery of your real messages.

![DMARC: an envelope with a shield and check marks for SPF, DKIM and DMARC](https://www.hyyat.com/wp-content/uploads/2026/10/hkb-dmarc.webp)

## Why do you need it?

  *1***Stop spoofing**Without DMARC, anyone can send a message showing info@yourcompany.com as the sender. *2***Better delivery**Mail servers trust domains that apply SPF, DKIM and DMARC together. *3***Reports**It sends you reports on who sends mail in your domain’s name.

## How does it work with SPF and DKIM?

| Record | What it proves |
| --- | --- |
| SPF | That the sending server is allowed to send for your domain. |
| DKIM | That the message is digitally signed by your domain and was not altered. Read [what DKIM is](https://www.hyyat.com/en/knowledgebase/what-is-dkim/). |
| DMARC | What mail servers should do if the checks fail, and where to send reports. |

So enable SPF and DKIM first. Read [enabling SPF and DKIM in cPanel](https://www.hyyat.com/en/knowledgebase/enable-spf-dkim-cpanel/).

## Steps to add DMARC

1. **Confirm SPF and DKIM:** They must be enabled and correct before DMARC.
2. **Add a TXT record:** From the Zone Editor in cPanel, or from [DNS management in the client area](https://www.hyyat.com/en/knowledgebase/manage-dns-records-client-area/). The name is `_dmarc` and the value is like the example below.
3. **Start with the monitoring policy p=none:** No message is affected, but you receive reports for two to four weeks.
4. **Review the reports:** Make sure every system that sends in your name (your site, billing system, marketing tools) passes the checks.
5. **Tighten the policy gradually:** Move to `p=quarantine` (spam), then `p=reject` (reject) once you are sure.

```
_dmarc.example.com   TXT   "v=DMARC1; p=none; rua=mailto:dmarc@example.com"
```

 **Do not start with reject:** if a system sends in your name without correct SPF and DKIM, its real messages will be rejected. Start with none and monitor.

Major mail providers such as Gmail and Yahoo require DMARC for bulk senders. Also read about [phishing emails](https://www.hyyat.com/en/knowledgebase/phishing-emails/).

## Your company email with Hyyat Host

- SPF and DKIM are enabled from cPanel in one click, and DMARC with a single record.
- Spam protection for incoming mail and monitoring of sending from accounts.
- If you need help with DNS records, open a ticket and we will set them up with you.

Learn more about [email hosting](https://www.hyyat.com/en/email-hosting/).

## Frequently asked questions

   Is DMARC necessary for a small business?

Yes, because it stops your company name being spoofed in scam emails to your customers, and improves delivery.

   What do p=none, quarantine and reject mean?

none: monitor only. quarantine: failing messages go to spam. reject: failing messages are rejected.

   Can DMARC block my real messages?

If you apply reject before setting up SPF and DKIM for all your systems, yes. That is why you start with none and watch the reports.

   **Related guides**

- [How to Enable SPF and DKIM in cPanel](https://www.hyyat.com/en/knowledgebase/enable-spf-dkim-cpanel/)
- [What Is a DKIM Record and How Does It Protect Your Email?](https://www.hyyat.com/en/knowledgebase/what-is-dkim/)
- [Phishing emails](https://www.hyyat.com/en/knowledgebase/phishing-emails/)
- [Email Hosting](https://www.hyyat.com/en/email-hosting/)

[All website security guides →](https://www.hyyat.com/en/kb/website-protection/)

  **Need this service from Hyyat Host?**Our team handles it for you, with support replying to tickets within 24 hours at most.[Email Hosting](https://www.hyyat.com/en/email-hosting/)[Business Hosting](https://www.hyyat.com/en/business-hosting/)