How Smart DMARC Works?

How Smart DMARC Works?

KDMARC is an analytical tool that complements the Simple Mail Transfer Protocol (SMTP) by monitoring all three of the standard email authentication protocols namely SPF, DKIM and DMARC. It offers a number of features to secure your email domains against forgery and advanced email-based attacks like spamming, spoofing, brand impersonation, BEC, etc. 

KDMARC offers the Smart DMARC feature that makes monitoring and securing your domains extremely easy and hassle-free. When you secure your email domain with KDMARC, it provides you with a unique CNAME. To use the dynamic Smart DMARC feature, you need to update this CNAME on the DNS. 

The CNAME is generated based on your existing DMARC record. In case your domain does not have an existing record, KDMARC creates a basic DMARC record for your domain. Applying the provided CNAME record will not affect your existing email flow in any way. This CNAME will just add KDMARC’s system-generated email IDs to your DMARC record for receiving DMARC reports.

You can use the Smart DMARC feature to change your domain’s SPF alignment, DKIM alignment and DMARC policies and sub-policies from the dashboard itself. This saves you the time and effort of manually changing these settings on the DNS and proves to be really helpful if you are managing multiple domains.

How to Use Smart DMARC?

To use the Smart DMARC feature, follow the steps given below:


Step 1: Go to the KDMARC Dashboard and select ‘Smart DMARC’.



Step 2: From the drop-down menu, select the domain for which you wish to configure the DMARC record.



What can You do with Smart DMARC?

There are a number of things you can do using the Smart DMARC feature, such as:

  1. You can easily change your domain’s DMARC policy with a single click. You have the option of switching the policy between None, Quarantine and Reject
  1. It lets you change your domain’s sub-policy. The sub-policy that you choose applies to all your domain’s sub-domains. You can choose between None, Quarantine and Reject. You can also select ‘Same as Parent’, under which the sub-policy will automatically switch to whatever policy you have chosen. 

  1. You can easily change the DKIM and SPF alignment of your domain with a single click

  1. You can choose whether or not you wish to receive the aggregate report showing the details of the emails sent from your domain. 

  2. It lets you choose if you want to receive the forensic report showing the details of your domain’s outbound emails that fail any authentication mechanisms. You can also choose the circumstances under which you would like to receive the report. It gives you four options to choose from- 

  1. Report if all mechanism fails
  1. Report if one mechanism fails
  1. Report DKIM failures
  1. Report SPF failures

  1. You can also change the Policy Application Percent, which refers to the percentage of outbound emails your stated DMARC policy applies to. 


Once you have made the required changes to your domain’s DMARC record, you can just click on ‘Save Record’ to save all the changes.




    • Related Articles

    • What is Smart DMARC?

      Implementation and management of SPF, DKIM and DMARC is one common issue faced by all. However, the Smart DMARC feature by KDMARC eliminates the hassle to a greater extent. It makes monitoring and securing domains extremely easy and hassle-free.  ...
    • How Smart SPF Works?

      KDMARC is an industry-leading cybersecurity tool, designed to monitor three standard email authentication protocols- SPF, DKIM and DMARC, for complementing the Simple Mail Transfer Protocol (SMTP). It offers the Smart SPF feature to monitor and ...
    • What is Smart SPF and Smart DMARC?

      Smart SPF is the configuration of sources/senders and IP's in your SPF record by a single click on the KDMARC dashboard. Smart DMARC refers to the change in policy (None, Quarantine and Reject & their DMARC tags) at real time through the KDMARC ...
    • Smart BIMI documentation

      Brand Indicators for Message Identification (BIMI) is a new and emerging email method of email authentication that aims to provide email recipients and email security systems with greater confidence in verifying the source of emails. With an increase ...
    • Can We Setup DMARC Using SPF?

      Yes, you can set up DMARC without DKIM and even if you only have DMARC and SPF setup. In cases where the DKIM check fails, DMARC authentication is dependent on the SPF check and SPF identifier alignment, which works but is not that optimal. DMARC ...