Cloudflare DMARC Management
Stop brand impersonation.
Available on all plans
When someone receives an email that claims to be from your domain, email servers check whether that message is authentic. Three DNS-based mechanisms handle this verification:
- SPF (Sender Policy Framework) ↗ confirms the email was sent from an IP address or domain your domain authorizes.
- DKIM (DomainKeys Identified Mail) ↗ authenticates the sender's domain and verifies the email content was not altered in transit, using a cryptographic signature.
- DMARC (Domain-based Message Authentication Reporting and Conformance) ↗ ties SPF and DKIM together and tells receiving servers what to do when a check fails (for example, reject the email, quarantine it, or take no action).
Cloudflare DMARC Management helps you track every source that is sending emails from your domain and review DMARC reports for each source. These reports show whether messages sent from your domain are passing SPF, DKIM, and DMARC checks — so you can identify unauthorized senders and protect your domain from being used in phishing or spoofing attacks.
Email security
Protect your email inbox with Email security.
Cloudflare DNS
Fast, resilient and easy-to-manage DNS service.