Set Up DMARC Monitoring in 5 Minutes
What you need
Two things: a domain you control and access to its DNS settings. If you can add a TXT record, you can set up DMARC monitoring.
If your domain does not have SPF or DKIM configured yet, DMARC monitoring will still work. Reports will show which senders are failing authentication, which is exactly the data you need to fix it.
Step 1: Create a free account
Go to acorndmarc.com/auth/signup and enter your email address. AcornDMARC uses passwordless login: you will receive a magic link to verify your email. No credit card or payment info required.
Step 2: Add your domain
From the dashboard, type your domain name (e.g., example.com) and click Add. You can add as many domains as you want.
Step 3: Update your DNS DMARC record
Add a TXT record to your domain's DNS with the host _dmarc:
_dmarc.yourdomain.com TXT "v=DMARC1; p=none; rua=mailto:[email protected]"
If your domain already has a DMARC record, add rua=mailto:[email protected] to the existing value. You can have multiple RUA addresses separated by commas.
The p=none policy means monitor only. No email delivery is affected. You are just collecting data.
Where to add DNS records
- Cloudflare: DNS > Records > Add record > TXT
- Google Domains / Squarespace: DNS > Custom records > Manage
- GoDaddy: DNS Management > Add > TXT
- Namecheap: Advanced DNS > Add New Record > TXT
- Route 53 (AWS): Hosted zones > your domain > Create record
Step 4: Wait for reports
DMARC aggregate reports typically arrive within 24 to 48 hours. Google, Microsoft, Yahoo, and other major providers send daily reports. Smaller providers may send weekly.
AcornDMARC parses these reports automatically and populates your dashboard with:
- Pass/fail rates for every sender using your domain
- SPF and DKIM alignment status per sender
- Issue detection for misconfigured or unauthorized senders
- Volume trends over time
What to do after your first reports arrive
Review the dashboard and look for three things:
- Legitimate senders that fail: These are services you use (email marketing, CRM, helpdesk) that need SPF or DKIM configured. Fix these first.
- Unknown senders that pass: Could be forwarding services or senders you forgot about. Verify they are authorized.
- Unknown senders that fail: Likely spoofing attempts. Once all legitimate senders pass, tighten your policy to
p=quarantineand eventuallyp=rejectto block these.
AcornDMARC sends weekly summary emails so you can track progress without logging in.
Frequently asked questions
How do I set up free DMARC monitoring?
Create a free account at acorndmarc.com, add your domain, and update your DNS DMARC record to include rua=mailto:[email protected]. Reports start arriving within 24 to 48 hours and are parsed automatically into a visual dashboard.
What RUA address should I use for DMARC reports?
If you are using AcornDMARC, set your RUA to mailto:[email protected]. This tells email providers to send DMARC aggregate reports to AcornDMARC, which parses them and displays the results in your dashboard.
Does DMARC monitoring affect email delivery?
No. With a policy of p=none, DMARC monitoring is observe-only. No email is blocked, quarantined, or modified. You are simply collecting data about who sends email as your domain and whether it passes authentication.
How long does it take to start receiving DMARC reports?
Most providers send their first aggregate report within 24 to 48 hours of detecting your DMARC record. Google, Microsoft, and Yahoo send daily reports. Some smaller providers send weekly.