Glossary Entry
What is DMARC?
DMARC without the jargon — the definition, the analogy, and why any site owner should care.
The short answer
DMARC is the policy layer above SPF and DKIM, telling receivers how to treat mail that fails those checks and reporting back on what they saw.
The rest of the page opens it up — the mechanics, why a site owner should care, and one concrete example of it at work.
By the Hosting & Domains team · Reviewed 18 August 2026
0
Jargon left undefined
100+
Entries, all cross-linked
Real
Working examples
Free
To read, always
A _dmarc TXT record carries the policy, and there are three settings: none for monitoring, quarantine to divert failures into spam, and reject to refuse them outright. Aggregate reports come back naming every source sending as your domain, genuine and fraudulent alike.
The sequence matters. Start at p=none and keep reading the reports until every forgotten sender has shown itself, then climb the scale once everything legitimate is passing.
A way to picture DMARC
Standing instructions issued to every mailroom in the country about letters bearing your letterhead: where both the seal and the courier fail the check, bin it, and send me a weekly summary of what turned up.
Any analogy flattens the detail, naturally — but this one is solid enough to think with, and thinking is what a jargon buster is for.
What genuinely rides on it
Enforcement is the point at which somebody spoofing your domain actually stops getting through. Mailbox providers increasingly demand DMARC from senders too, which has turned it from best practice into an entry requirement.
Nobody expects you to work at this layer daily. The aim is recognising it when it explains something — and that moment is exactly when this page pays for itself.
One worked example
One month of p=none reports turns up a forgotten invoicing tool sending unsigned mail. With that source repaired and aligned, the domain moves to p=reject, and phishing carrying its name stops landing at any receiver that runs the check.
Scale that example across every website online and you have described the whole job of the concept in one stroke.
Where it appears on this platform
You will meet it in the control panel and now and then in a support thread, usually already set correctly. If this one landed, the natural follow-ups are SPF, DKIM, TXT Record and Phishing.
A copy is taken daily on every plan, and putting a file or a database back is one click in the panel rather than a support ticket.
A jargon buster from the people who answer the tickets
Sooner or later every confusing hosting term turns into a support ticket, so we defined the hundred commonest ones properly — once, in the same plain English we use with customers.
Order an annual plan and the first year of the name's registration is on us.
- 100+ entries, plain English all the way
- Ordinary analogies, working examples
- Neighbouring ideas linked together
- Written by our own support engineers
Why Hosting & Domains
Standard on every plan
This term, properly landed
DMARC defined, pictured by analogy and located in your own panel — recognise-level after a single read.
Analogies that hold
Every concept comes with a mental model that returns exactly when you need it.
The next step, drawn out
Carry on into SPF and DKIM — ideas rarely travel alone, so the neighbours are linked in.
Stakes made explicit
More than what a thing is: the moments it turns out to be the answer to a problem you have.
Tied to real hosting
Examples name platforms you would genuinely use, never an abstract diagram on a whiteboard.
Jargon-free by design
Definitions written for people who run sites, not for other sysadmins — translation rather than restatement.
Quick Start
Order placed to site online
- 1
Find it in your own account
Nothing teaches a hosting term faster than finding it in your own panel; five minutes of looking beats an hour of reading.
- 2
Check the defaults as they stand
Look at how your account has it configured. Nine times in ten the default is right, and a check turns the guess into certainty.
- 3
Chase the neighbouring terms
Hosting terms travel in groups — SPF, DKIM and TXT Record finish this one's picture, each a two-minute read away.
Built In
Fitted to every plan
- WordPress and 400+ further applications installed in one click
- LiteSpeed caching in the server itself rather than bolted on by plugin
- SSH, Git and Composer on the developer plans
- No set-up charge at any point, and no joining fee
- NVMe SSD storage on every tier, not only the dear ones
- Staging copies for trying a change before it goes live
- People on the support desk every hour of every day
- Spam and virus screening on every mailbox by default
- Webmail in the browser plus IMAP, POP and SMTP for any client
- A daily copy, with restores you run yourself from the panel
Frequently Asked
The questions that come up most
What is in a DMARC report — can anybody read my mail?
No message content appears anywhere in it. What arrives is a count per sending source, each with its authentication outcome beside it. Think of it as a census of who sends under your name, which is precisely what safe enforcement requires beforehand.
How soon should none become reject?
Weeks, paced by the evidence. You need long enough for the occasional senders — invoice runs, newsletters, an annual mailing — to show up in a report. Move early and you bounce the legitimate sender you had forgotten, and finding it is what the reports are for.
Do plans include copies I can restore myself?
Yes — every plan gets a daily copy, and the restore runs from your panel in minutes: files, databases or both, at three in the morning with no ticket queue in the way. Keeping a further copy offsite is still a sound habit, and nothing here stops you.
Will the renewal cost more than the first term?
No. The rate you order at is the rate you renew at, year after year. There is no introductory teaser here, so no second-year jump is waiting — the hosting line stays a fixed figure your accounts can plan around.
Keep reading
SPF (Sender Policy Framework)
SPF is a DNS record naming the mail servers allowed to send for your domain, which gives receivers a way to…
Phishing
Phishing is fraud by impersonation: messages and pages dressed up as a trusted brand in order to harvest lo…
How to Publish a DMARC Policy
A walkthrough to follow with the panel open in the next tab.
Dedicated Cloud
Reserved resources with cloud flexibility — the step above a VPS.
AI Website Builder
Tell the AI what you need and it drafts the site on real hosting.
Changing hosts? Run through our checklist first.
A plain order of work for a move nobody visiting will notice: which files go over first, how to carry the mail across without losing a message, when exactly to repoint DNS, and the two mistakes behind nearly every outage we are asked to rescue.
Put the site on ground you own.
From a first website to a rack of machines, moving up is a change to the account rather than a migration.
View Dedicated Cloud plans