Advisor's Growth Email Authentication - DMARC
DMARC is an essential validation system for verifying the authenticity of incoming emails. It ensures that the domain in the "From" email address matches the domain used to send the message. If the domains are mismatched, the email will fail the DMARC validation.
In This Article:
What is DMARC?
How to Resolve Email Failure Due to DMARC
What is DMARC?
DMARC stands for Domain-based Message Authentication, Reporting, and Conformance. It’s a protocol that relies on both SPF and DKIM to authenticate emails. DMARC enables domain owners to safeguard their domains from unauthorized use, such as email spoofing.
DMARC provides clear instructions to receiving email servers on how to process incoming messages. For an email to be successfully delivered, it must pass both DKIM and SPF alignment checks, as specified by the domain’s DMARC policy. Emails that do not pass DMARC verification may be rejected, reported to the domain owner, or directed to the spam folder.
By implementing a DMARC policy, you can protect your domain from spoofing attempts, helping to shield your brand and recipients from fraudulent emails.
How to Resolve Email Failure Due to DMARC?
Advisor's Growth email system operates with two types of sending domains:
Shared Sending Domain:
When using the Advisor's Growth email system, your emails are sent through shared domains like mg.msgsndr.net and mg.msgsndr.org.
Note: DMARC compliance is not required when using the shared domains on the Advisor's Growth platform.
If you encounter the following error:
"The domain in your 'From' address (kate@test.com) has a p=reject DMARC policy. Most inbox providers will reject your messages without a dedicated sending domain, leading to increased bounce rates. To avoid this, use a company email."
Your current DMARC record might look like this:
v=DMARC1; p=reject
Temporary Fix: To resolve this issue, update your DMARC record in your DNS settings to use a p=none policy temporarily. This ensures that emails are delivered even if they fail DMARC validation. Keep in mind, however, that this relaxed policy is not recommended for the long term and should only be applied temporarily.
Dedicated Sending Domain:
To fully comply with DMARC, you’ll need to connect a dedicated sending domain to your account that matches the domain in your email's "From" address. For example, if you're sending emails from kate@test.com and the domain test.com is protected by DMARC, you'll need to configure a dedicated sending domain like mg.test.com to meet DMARC's requirements.