Browse the Learning Center

What are you trying to fix?

Everything on DMARC, SPF, DKIM and email delivery.

Start here

Get to p=reject.

All 4 reading paths →

The full route from an unprotected domain to an enforced policy, in the order the work actually happens.

What DMARC actually doesPolicy, alignment, and what a receiving server checks.Step 1 of 5
Publish your first recordWhere the record goes in DNS and why it starts at p=none.Step 2 of 5
Read your first reportFind every sender using your domain, legitimate or not.Step 3 of 5
Fix SPF before you tightenClear PermError and the 10-lookup limit so real mail survives.Step 4 of 5
Move to quarantine, then rejectStage the policy without losing legitimate mail.Step 5 of 5

Browse by topic

DMARC

Policy, tags, alignment, aggregate and failure reports.

94 guides

SPF

Records, include chains, the 10-lookup limit, PermError fixes.

38 guides

DKIM

Selectors, key rotation, body-hash failures, alignment.

46 guides

Delivery errors

SMTP 550s, TLS failures, and every Gmail and Yahoo error code.

32 guides

Deliverability

Blocklists, IP and domain reputation, landing in the inbox.

91 guides

Email infrastructure

DNS, MX, MTA-STS, BIMI, and the routes mail relies on.

53 guides

ESP setup

SPF and DKIM guides for HubSpot, Brevo, Chargebee, and more.

26 guides

For MSPs

Running DMARC across client domains: reporting, tooling, margins.

35 guides

Email threats

Phishing, BEC, spoofing, and the wider security landscape.

112 guides

Look up an exact answer

Glossary

Every DMARC, SPF, DKIM and MTA-STS tag, explained one page at a time.

p=nonep=quarantinep=rejectv=DMARC1pct

SMTP error codes

What each bounce code means and the exact fix, provider by provider.

421 4.7.0451 4.3.0DKIM verification failure (550)550 5.1.1550 5.7.1

Take a break

Learn DMARC with our 16-bit starfighter game

Blast the Spoof Dreadnought, upgrade to spread and rail cannons, learn how DMARC actually gets deployed, and top the world leaderboard. Free, no signup.

Set up DKIM