--- title: "Understanding DMARC Percentage Tag for Advancing Policies | DuoCircle" description: "So, you have decided to jump on the DMARC bandwagon?" image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/dmarc/understanding-dmarc-percentage-tag-for-advancing-policies/" --- Quick Answer The DMARC pct tag tells receiving servers what percentage of failing messages to apply the published policy to. With p=quarantine; pct=25, only 25 percent of messages failing DMARC alignment go to spam; the remaining 75 percent are treated as if the policy were p=none. The tag exists for safe rollouts: senders can move from none to quarantine or reject in steps, watching DMARC reports for collateral damage from forgotten third-party senders before applying the full policy. Default is pct=100 if the tag is omitted. Typical progression: start at p=none for visibility, move to p=quarantine; pct=10, raise to 25, 50, then 100 over weeks while reports show no legitimate failures, then advance to p=reject. The tag is being deprecated in DMARCbis, so it is a transitional tool rather than a permanent setting. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fdmarc%2Funderstanding-dmarc-percentage-tag-for-advancing-policies%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Understanding%20DMARC%20Percentage%20Tag%20for%20Advancing%20Policies&url=undefined%2Fblog%2Fdmarc%2Funderstanding-dmarc-percentage-tag-for-advancing-policies%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fdmarc%2Funderstanding-dmarc-percentage-tag-for-advancing-policies%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fdmarc%2Funderstanding-dmarc-percentage-tag-for-advancing-policies%2F&title=Understanding%20DMARC%20Percentage%20Tag%20for%20Advancing%20Policies "Share on Reddit") [ ](mailto:?subject=Understanding%20DMARC%20Percentage%20Tag%20for%20Advancing%20Policies&body=Check out this article: undefined%2Fblog%2Fdmarc%2Funderstanding-dmarc-percentage-tag-for-advancing-policies%2F "Share via Email") ![DMARC Percentage Tag](https://media.mailhop.org/duocircle/images/2023/12/windows-smtp-service.jpg) So, you have decided to jump on the DMARC bandwagon? As mail providers like [Google](https://blog.google/products/gmail/gmail-security-authentication-spam-protection/) and [Yahoo](https://blog.postmaster.yahooinc.com/post/730172167494483968/more-secure-less-spam) have made DMARC a standard **practice starting in 2024**, many organizations are now recognizing the importance of implementing the email authentication protocol to [mitigate the risks of phishing and spoofing](/content/phishing-prevention/how-to-prevent-phishing-and-spoofing) and enhance security. If you’re one of these organizations to embrace [DMARC](/resources/what-is-dmarc) as a part of your [cybersecurity](/) strategy but are struggling to determine your DMARC policy or the **“pct” tag**, you’re at the right place. In this blog, we will take you through the basics of the **DMARC pct (percentage) tag** and its relevance in advancing policies. ## What is DMARC pct Tag? Considering how frequent and grave [spoofing attacks](https://www.csoonline.com/article/655217/microsoft-american-express-most-spoofed-brands-in-financial-services-phishing-emails.html) have become, implementing the DMARC the right way with configurations tailored to your organization’s needs could significantly **transform your security strategy**. _One such configuration employed in your DMARC record is the pct tag._ pct tag or the DMARC percentage tag is used to specify the percentage of email messages that should be subjected to the DMARC policy. By specifying the percentage of emails that should be subjected to [email authentication](/resources/email-authentication) tests lets you monitor and fine-tune the configurations of the DMARC policy without having to impact **legitimate email traffic**. _The pct value of the [DMARC record](/resources/create-dmarc-records) published in the DNS for your domain can vary between 0 and 100, representing the percentage of messages that would undergo DMARC authentication._ Here’s how the pct tag would appear in the DNS text record: **v=DMARC1; p=quarantine; rua=mailto:[info@abc.com](mailto:info@abc.com); pct=30** Here, the **p=quarantine is implemented at 30%**, which means that only 30% of the email messages sent from your domain would be sent to spam by the receiver’s mail servers if they fail authentication. ## Why is it Important? Are you wondering why you should even bother defining the pct tag while deploying the [DMARC policy](/resources/dmarc-policy) when it can be set to pct=0? Or can you simply set the pct tag at 100% at once and avoid the hassle of **gradually increasing** its percentage? [![ DMARC policy](https://media.mailhop.org/duocircle/images/2023/12/windows-smtp-service-1.jpg)](https://media.mailhop.org/duocircle/images/2023/12/windows-smtp-service-1.jpg) _Well, the pct tag is not a mandatory standard to follow, but it serves as a valuable tool when it comes to managing the rollout of DMARC policies._ Implementing DMARC policies with a percentage tag set as low as 10% or 20% addresses concerns about the legitimacy of emails. In most cases, to bring down your [spam score](https://www.reputio.com/what-is-spam-score/) and ensure **enhanced email delivery**, it is recommended to rely on a phased approach and gradually move up to employing the **ideal DMARC policy**, that is, p=reject; pct=100\. This strategic approach allows domain owners to gain insights into legitimate emails, identify loopholes in the DMARC policy, and **corrective actions** without causing widespread disruptions. ## How to Apply the pct Tag for DMARC Policy Progression? Now that we have established that the process of setting DMARC policy is a gradual one, let’s take a look at the way you can move from p=none to p=quarantine, then p=reject, while maintaining the recommended [DMARC compliance](https://www.linkedin.com/pulse/what-dmarc-compliance-ramgopal-nayak--7uvkf?trk=articles%5Fdirectory) **rate of 98%**. But before we get into the process, remember that DMARC compliance can only be achieved by subjecting your domains and IP addresses to **SPF and DKIM pass or align**. So, when tweaking your pct tag, make sure that your domain is properly configured with SPF and [DKIM](/resources/what-is-dkim). Here’s how to **transition** from p=none to p=reject; pct=100: ### Start Small While you may be tempted to play it safe and enforce p=0, the thing is, setting the pct tag to 0 is as good as having no policy at all. With p=0, it’s basically like keeping your front door open. This means you’re **not actively protecting your domain** against [unauthorized activities](https://www.reuters.com/business/retail-consumer/vans-owner-vf-corps-order-fulfillment-operations-hit-by-cyber-incident-2023-12-18/) and are allowing all emails, regardless of their authentication status to be sent. zSo, it is recommended to introduce the pct tag with a low percentage, such as 10% or 20%. Doing this will allow you to monitor a fraction of your emails and transition without making things go haywire. While you’re at it, make sure that you keep a tab on your [DMARC reports](/resources/dmarc-aggregate-report). ### Gradually Increase the Percentage To keep spoofing attacks at bay and ensure that your legitimate emails land in the recipient’s inbox, the next step is to **increase your pct tag numbers**. Based on the observed results and your confidence in the [DMARC deployment](/email-services/google-yahoo-mandatory-to-deploy-dmarc-for-more-than-5000-daily-emails/), you can now take the pct percentage from 20% to 50%. ### Make Adjustments, if needed If you notice any problems and there are adjustments required along the way, such as [whitelisting legitimate sources](https://www.goodaccess.com/ip-whitelisting) or taking other **corrective actions**, make sure you’re implementing them. ### Consider Full Enforcement Once you are confident in the effectiveness of your DMARC deployment and have addressed any issues, consider setting the pct tag to **100% for full enforcement.** After your domain reaches 100% Quarantine, start the entire process again, with “reject” increasing from 10% to 100%. ### Maintain DMARC Enforcement [![SPF records](https://media.mailhop.org/duocircle/images/2023/12/spf-record-4793.jpg)](https://media.mailhop.org/duocircle/images/2023/12/spf-record-4793.jpg) After you have taken the plunge and set the pct tag to 100%, it is now time to monitor the enforcement to ensure a secure email ecosystem and long-term DMARC compliance. To maintain your goal of full enforcement, make sure that you **follow best practices**, such as _periodically checking your [SPF records](/content/spf-records), regularly rotating the DKIM key, evaluating DMARC reports, and checking new sources of legitimate emails._ ## Conclusion Struggling with DMARC enforcement for your domain? As you might already know, DIYing DMARC is not a good option when it comes to ensuring comprehensive protection, so it is recommended that you rely on experienced professionals to navigate the **intricacies of DMARC enforcement**. At DuoCircle, we recognize the importance of proper DMARC implementation, especially in the face of rising [cybersecurity threats](https://onlinedegrees.sandiego.edu/top-cyber-security-threats/). This is why we help generate the **correct DMARC records** for your business domain, maintain them for you, and provide you with timely reports. To know more about how our team of experts can help you protect your domain, [get in touch](/contact) with us today! ## Topics DMARCemail securityUpdates ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) ## Related Articles [ DMARC 5m A Guide to Advancing DMARC Policies for Enhanced Email Deliverability Jan 19, 2024 ](/blog/dmarc/a-guide-to-advancing-dmarc-policies-for-enhanced-email-deliverability/)[ DMARC 5m How to check DMARC compliance for any domain Jun 25, 2024 ](/blog/dmarc/a-guide-to-checking-dmarc-compliance/)[ DMARC 6m A guide to detecting DMARC problems using the pentesting techniques Oct 3, 2024 ](/blog/dmarc/a-guide-to-detecting-dmarc-problems-using-the-pentesting-techniques/)[ DMARC 8m How to publish a DMARC record for your domain (with example) Jun 12, 2024 ](/blog/dmarc/a-guide-to-publishing-dmarc-records-for-your-domain/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"Understanding DMARC Percentage Tag for Advancing Policies","description":"So, you have decided to jump on the DMARC bandwagon?","url":"https://www.duocircle.com/blog/dmarc/understanding-dmarc-percentage-tag-for-advancing-policies/","datePublished":"2023-12-28T18:00:25.000Z","dateModified":"2025-05-08T15:32:16.000Z","dateCreated":"2023-12-28T18:00:25.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/dmarc/understanding-dmarc-percentage-tag-for-advancing-policies/"},"articleSection":"dmarc","keywords":"DMARC, email security, Updates","wordCount":981,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2023/12/windows-smtp-service.jpg","caption":"DMARC Percentage Tag","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"DMARC"},{"@type":"ListItem","position":3,"name":"Understanding DMARC Percentage Tag for Advancing Policies","item":"https://www.duocircle.com/blog/dmarc/understanding-dmarc-percentage-tag-for-advancing-policies/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"DMARC","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Understanding DMARC Percentage Tag for Advancing Policies","item":"https://www.duocircle.com/blog/dmarc/understanding-dmarc-percentage-tag-for-advancing-policies/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"Understanding DMARC Percentage Tag for Advancing Policies","description":"So, you have decided to jump on the DMARC bandwagon?","url":"https://www.duocircle.com/blog/dmarc/understanding-dmarc-percentage-tag-for-advancing-policies/","datePublished":"2023-12-28T18:00:25.000Z","dateModified":"2025-05-08T15:32:16.000Z","dateCreated":"2023-12-28T18:00:25.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/dmarc/understanding-dmarc-percentage-tag-for-advancing-policies/"},"articleSection":"dmarc","keywords":"DMARC, email security, Updates","wordCount":981,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2023/12/windows-smtp-service.jpg","caption":"DMARC Percentage Tag","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```