--- title: "A Guide to Advancing DMARC Policies for Enhanced Email Deliverability | DuoCircle" description: "In theory, implementing DMARC is as simple as publishing a DMARC record with your DNS. Well, only if things were this straightforward." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/dmarc/a-guide-to-advancing-dmarc-policies-for-enhanced-email-deliverability/" --- Quick Answer Advance a DMARC policy in stages: monitor at p=none until alignment is solid, move to p=quarantine, then p=reject. Use the pct tag to ramp enforcement gradually (25, 50, 75, 100 percent) and only tighten once your DMARC compliance rate is consistently above 98 percent. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fdmarc%2Fa-guide-to-advancing-dmarc-policies-for-enhanced-email-deliverability%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=A%20Guide%20to%20Advancing%20DMARC%20Policies%20for%20Enhanced%20Email%20Deliverability&url=undefined%2Fblog%2Fdmarc%2Fa-guide-to-advancing-dmarc-policies-for-enhanced-email-deliverability%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fdmarc%2Fa-guide-to-advancing-dmarc-policies-for-enhanced-email-deliverability%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fdmarc%2Fa-guide-to-advancing-dmarc-policies-for-enhanced-email-deliverability%2F&title=A%20Guide%20to%20Advancing%20DMARC%20Policies%20for%20Enhanced%20Email%20Deliverability "Share on Reddit") [ ](mailto:?subject=A%20Guide%20to%20Advancing%20DMARC%20Policies%20for%20Enhanced%20Email%20Deliverability&body=Check out this article: undefined%2Fblog%2Fdmarc%2Fa-guide-to-advancing-dmarc-policies-for-enhanced-email-deliverability%2F "Share via Email") ![DuoCircle blog post image](https://media.mailhop.org/duocircle/images/2024/01/dmarc-report-service.jpg) In theory, implementing [DMARC](/email/dmarc) is as simple as publishing a DMARC record with your DNS. Well, only if things were this straightforward. As businesses expand and **email ecosystems** become more complex, it becomes challenging for security teams to [prevent email-based attacks](/phishing-protection/7-ways-protect-organization-email-based-ransomware-attacks/) and ensure that no legitimate emails are marked as spam. [![Email authentication](https://media.mailhop.org/duocircle/images/2024/01/spf-record-6175.jpg)](https://media.mailhop.org/duocircle/images/2024/01/spf-record-6175.jpg) We understand that employing DMARC is a complex task as it demands a deliberate, methodical approach, especially when it comes to advancing policies. It might seem like taking a strategic route is about the technical elements, but there’s more to it. Apart from the technical aspects, which certainly cannot be overlooked, following a **tactical approach** when employing DMARC policies also gives you a comprehensive understanding of [email authentication](/resources/email-authentication) dynamics and the impact they can have on your organization. _In this article, we’ll take you through the **best practices** that you should be aware of when advancing DMARC policies, moving from p=none to p=quarantine to p=reject._ ## How to Prepare for DMARC Policy Progress? Are you considering advancing DMARC policies? Hold on! Before you jump the gun, here are a few things that you should know beforehand for a **safe and secure** email ecosystem: ### Respond; Don’t React Do not rush into advancing the policies too soon. While you might be tempted to see how different policies impact your [email deliverability](/a-guide-on-email-deliverability), it is always a good idea to have a **proper understanding** of DMARC standards and all your email sources. ### Prioritize DMARC Alignment Before you go on to implementing DMARC policies, make sure that all the known email sources are in [DMARC alignment](/dmarc/dmarc-relaxed-vs-strict-alignment/). This is only possible when the domain in the [email’s “From” header](https://whatismyipaddress.com/email-header) matches with the one specified in **authentication mechanisms**, SPF and [DKIM](/resources/what-is-dkim). _Once the message passes one of these checks, it qualifies to proceed for DMARC alignment._ ### Know Your DMARC Compliance Percentage Rate Analyzing and operating on the basis of the [DMARC compliance rate](https://glockapps.com/help/art/understand-dmarc-data/) is crucial for effective DMARC **policy progression**. _In most cases, if the DMARC compliance rate is above 98%, your domain is all set for DMARC policy advancement._ But keep in mind that this might not always be the case. For instance, in situations where [unauthorized email](https://www.bizjournals.com/boston/news/2023/12/04/citizens-bank-subscribers-expletive-email.html) sources are identified, like a [third-party vendor](https://www.venminder.com/blog/who-considered-third-party-vendor) not **adhering to your standards**, you can tighten your DMARC policy before reaching this compliance threshold. ## What are the Best Practices to Follow When Progressing Policy? Your email ecosystem is a dynamic space where the good, bad, and the ugly come together. But how do you differentiate between them? Your [email landscape](https://venngage.com/blog/email-stats/) evolves with your business, this means the **measures to protect** should evolve too. So, advancing your DMARC policy is like **upgrading your email’s security** system, [keeping pace with the ever-changing threats](https://thehackernews.com/2023/07/microsoft-expands-cloud-logging-to.html), and ensuring that only the ‘good’ emails make it through. Let us look at some of the key things you should **keep in mind** when progressing your [DMARC policy](/resources/dmarc-policy). ### Familiarize Yourself with the Implications of DMARC Policies Who doesn’t want full [protection from phishing](/email/phishing-protection) and [spoofing attacks](https://indianexpress.com/article/cities/pune/cyber-criminals-target-hapless-employees-con-firms-of-crores-in-pune-serum-institute-among-those-robbed-8952199/)? In pursuit of comprehensive protection against such attacks, remember that advancing policies isn’t just about keeping [threat actors](https://www.cybersecuritydive.com/news/truebot-malware-phishing-attacks-us-canada/685582/) and their nefarious activities at bay. _When progressing DMARC policies for your domain, it is crucial to be aware of the **operational impact of each policy** level, p=none, p=quarantine, and p=reject._ Moreover, know that moving from monitoring to an enforcement stance can significantly affect how your emails are received and handled. [![3 DMARC policies](https://media.mailhop.org/duocircle/images/2024/01/DMARC-report-service-3.jpg)](https://media.mailhop.org/duocircle/images/2024/01/DMARC-report-service-3.jpg) ### Apply DMARC pct Tag The percentage tag or the [DMARC pct tag](/dmarc/understanding-dmarc-percentage-tag-for-advancing-policies/) is an optional yet critical aspect of DMARC implementation that specifies the **percentage of emails** that would be put under scrutiny by email authentication tests. _Setting a pct tag allows you to employ the authentication policies to only the specified percentage of emails instead of all of them._ That’s not all! This strategic approach facilitates a smoother transition to stricter email authentication practices by helping you monitor the impact on email deliverability ### Deliberate DMARC Policy Progression It should come as no surprise that [effective DMARC policy progression](https://www.linkedin.com/pulse/dmarc-mastery-take-your-email-security-next-level-m%C3%BCcahit-m%C4%B1hc%C4%B1) is one that is implemented gradually. If you rush into building a **strong defense mechanism** with p=reject, you run the risk of blocking out legitimate emails or even disrupting normal, essential communication channels. So, it is recommended that you take a phased approach, as shown below: | Week | Policy | Percentage | | ---- | ---------- | ---------- | | 1 | none | pct=25% | | 2 | none | pct=50% | | 3 | none | pct=75% | | 4 | none | pct=100% | | 5 | quarantine | pct=25% | | 6 | quarantine | pct=50% | | 7 | quarantine | pct=75% | | 8 | reject | pct=1% | | 9 | reject | pct=25% | | 10 | reject | pct=50% | | 11 | reject | pct=75% | | 12 | reject | pct=100% | ### Ensure DMARC Maintenance Once you have mastered the art of DMARC policy progression and achieved p=reject, it is now time to maintain enforcement for [DMARC compliance](https://www.ionos.com/digitalguide/e-mail/e-mail-security/dmarc-check/). _An easy way to do this is by **regularly conducting** various checks of [SPF records](/content/spf-records), monitoring [DKIM key rotation](https://www.linkedin.com/pulse/why-should-you-automate-dkim-key-rotation-pooja-bisht), keeping a tab on DMARC data, leveraging reports, and incident management._ ## Conclusion Navigating the complex landscape of DMARC authentication and policy progression is no easy feat, especially when the stakes are high! If you’re struggling to keep up with the ever-evolving [cybersecurity](/) landscape, trust us to protect your domain against [malicious attacks](https://www.bbc.com/news/technology-67583486). Want to know how **DuoCircle can help** bolster your defenses? [Speak to one of our experts](/contact) today! ## Topics DMARCemail securityUpdates ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) ## Related Articles [ DMARC 5m How to check DMARC compliance for any domain Jun 25, 2024 ](/blog/dmarc/a-guide-to-checking-dmarc-compliance/)[ DMARC 6m A guide to detecting DMARC problems using the pentesting techniques Oct 3, 2024 ](/blog/dmarc/a-guide-to-detecting-dmarc-problems-using-the-pentesting-techniques/)[ DMARC 8m How to publish a DMARC record for your domain (with example) Jun 12, 2024 ](/blog/dmarc/a-guide-to-publishing-dmarc-records-for-your-domain/)[ DMARC 6m Limitations of DMARC For Fortifying Email Phishing in 2024! May 24, 2024 ](/blog/dmarc/dmarc-limitations-for-fortifying-email-phishing-in-2024/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"A Guide to Advancing DMARC Policies for Enhanced Email Deliverability","description":"In theory, implementing DMARC is as simple as publishing a DMARC record with your DNS. Well, only if things were this straightforward.","url":"https://www.duocircle.com/blog/dmarc/a-guide-to-advancing-dmarc-policies-for-enhanced-email-deliverability/","datePublished":"2024-01-19T18:56:52.000Z","dateModified":"2025-05-08T18:16:21.000Z","dateCreated":"2024-01-19T18:56:52.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/dmarc/a-guide-to-advancing-dmarc-policies-for-enhanced-email-deliverability/"},"articleSection":"dmarc","keywords":"DMARC, email security, Updates","wordCount":866,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2024/01/dmarc-report-service.jpg","caption":"DuoCircle blog post image","width":900,"height":575},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"DMARC"},{"@type":"ListItem","position":3,"name":"A Guide to Advancing DMARC Policies for Enhanced Email Deliverability","item":"https://www.duocircle.com/blog/dmarc/a-guide-to-advancing-dmarc-policies-for-enhanced-email-deliverability/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"DMARC","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"A Guide to Advancing DMARC Policies for Enhanced Email Deliverability","item":"https://www.duocircle.com/blog/dmarc/a-guide-to-advancing-dmarc-policies-for-enhanced-email-deliverability/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"A Guide to Advancing DMARC Policies for Enhanced Email Deliverability","description":"In theory, implementing DMARC is as simple as publishing a DMARC record with your DNS. Well, only if things were this straightforward.","url":"https://www.duocircle.com/blog/dmarc/a-guide-to-advancing-dmarc-policies-for-enhanced-email-deliverability/","datePublished":"2024-01-19T18:56:52.000Z","dateModified":"2025-05-08T18:16:21.000Z","dateCreated":"2024-01-19T18:56:52.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/dmarc/a-guide-to-advancing-dmarc-policies-for-enhanced-email-deliverability/"},"articleSection":"dmarc","keywords":"DMARC, email security, Updates","wordCount":866,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2024/01/dmarc-report-service.jpg","caption":"DuoCircle blog post image","width":900,"height":575},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```