How to fix DMARC policy none

What this issue means

DMARC policy none monitors authentication results but does not ask receivers to quarantine or reject spoofed mail.

Why it matters

A stronger DMARC policy helps reduce spoofing risk and is often required before BIMI rollout.

Verify DNS TXT records, alignment, and reporting before moving from monitoring to enforcement.

How to check it

1. 1Run Email Security Check.
2. 2Confirm SPF and DKIM pass and align for legitimate senders.
3. 3Review DMARC aggregate reports before enforcement.

How to fix it

1. 1Keep p=none while collecting reports.
2. 2Move to p=quarantine with a small pct value.
3. 3Increase pct gradually, then move to p=reject when legitimate mail is aligned.

Platform-specific fixes

Validate the fix

1. 1Re-run Email Security Check.
2. 2Check TXT records for SPF, DKIM, and DMARC alignment.
3. 3Monitor bounce and spam reports after policy changes.

FAQ