> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dmarceye.com/llms.txt
> Use this file to discover all available pages before exploring further.

# DMARC Management

> Configure your DMARC policy and publish it to DNS — copy the record, email it to your administrator, or apply it automatically — and review SPF, DKIM, and BIMI, all from a domain's detail.

DMARC Management moves DMARCeye from reporting into action. Inside each domain's detail you can build a DMARC record, publish it to DNS, and review the domain's SPF, DKIM, and BIMI status in one place.

## Opening DMARC Management

There are two ways in:

* From the [Domain overview](/domain-overview), open a domain's **⋮** menu and choose **DMARC Management**.
* From a domain's detail page, select the **DMARC Management** tab (alongside **Reports** and **Settings**).

The top of the page shows the domain's current **Status**, its active **DMARC Policy**, and the time of the last DMARC record check.

## Configure and publish your DMARC record

The **DMARC Policy & Reporting** section first shows **your current DMARC record** — the policy, the policy application percentage, and how many reporting addresses are set — then guides you through three steps.

### Step 1 — Configure settings

Set your policy and reporting options. Each field includes inline guidance:

| Field                             | What it controls                                                                                               |
| :-------------------------------- | :------------------------------------------------------------------------------------------------------------- |
| **Policy (p)**                    | The enforcement level: None, Quarantine, or Reject. Start with **None** to monitor without affecting delivery. |
| **Policy Application Percentage** | The share of mail the policy applies to.                                                                       |
| **Report Interval (ri)**          | How often aggregate reports are sent (default 86400 seconds, 24 hours).                                        |
| **DKIM Alignment (adkim)**        | Relaxed allows subdomain matches; Strict requires an exact match.                                              |
| **SPF Alignment (aspf)**          | Relaxed allows subdomain matches; Strict requires an exact match.                                              |
| **Failure Options (fo)**          | When forensic reports are generated.                                                                           |

<Tip>
  New to DMARC? Start at **Policy: None** to gather data, move to **Quarantine** once you've accounted for every legitimate sender, then advance to **Reject**. The [DNS Checker](/dns-checker) explains how to read an existing record.
</Tip>

### Step 2 — Replace record

DMARCeye generates the matching TXT record from your settings:

* **Record Type** — `TXT`
* **Host/Name** — `_dmarc`
* **Value** — the full record, with a copy button.

### Step 3 — Publish

Choose how to get the record into DNS:

<Columns cols={3}>
  <Card title="Publish manually" icon="pen">
    Copy the record and add or replace the TXT record in your DNS provider's control panel.
  </Card>

  <Card title="Send by email" icon="envelope">
    Send the record and setup instructions to your developer or DNS administrator.
  </Card>

  <Card title="One-Click DNS Setup" icon="bolt">
    When your DNS is on a supported provider, DMARCeye updates the TXT record for you in seconds.
  </Card>
</Columns>

<Info>
  DMARCeye detects your DNS provider automatically. When it recognises a supported provider (Cloudflare today, with more on the way), **One-Click DNS Setup** appears so you can apply the record without leaving DMARCeye. See [One-click DNS setup](/one-click-dns-setup).
</Info>

Use **Reload DNS Records** to re-check what's live after publishing.

## SPF, DKIM, and BIMI checks

Below the DMARC section, the same page shows the domain's other authentication records as read-only checks that reflect what is currently published in DNS:

<Card title="SPF Configuration" icon="magnifying-glass">
  Your current SPF record as detected in DNS. SPF limits which servers may send mail on behalf of your domain.
</Card>

<Card title="DKIM Setup" icon="magnifying-glass">
  The DKIM selectors detected for the domain, and whether each is valid and configured.
</Card>

<Card title="BIMI Logo" icon="magnifying-glass">
  Whether a BIMI record is detected. BIMI displays your brand logo in supporting email clients; if none is found, the check reports "Not detected."
</Card>

Each check has its own **Reload** button. For one-off checks of any domain — including domains not in your account — the same checks are available in [DNS Tools](/dns-tools-overview).

## Subdomains and inherited policies

DMARCeye recognises whether a domain is a subdomain and accounts for its relationship to the parent:

* A **subdomain with its own DMARC record** is managed here exactly like a root domain.
* A **subdomain that inherits its parent's policy** has no independent record to edit, so the management controls aren't shown — its policy is managed at the parent domain. You can still view its reports and monitor its activity.

For how detection and inheritance work, see [Subdomains](/subdomains).