Identity Security
Check your domain trust and ensure your sender identity is safe from spoofing via the InboxPin Command Center.
DMARC & Anti-Spoofing Protection
Domain-based Message Authentication, Reporting, and Conformance (DMARC) is the ultimate safeguard against email spoofing, phishing, and impersonation attacks.
What is DMARC?
DMARC ties your SPF and DKIM protocols together. It tells receiving servers (like Gmail and Outlook) exactly what to do if an email claims to be from your domain but fails SPF or DKIM authentication. Without DMARC, anyone can spoof your domain and send malicious emails that look like they came from you.
The Three Policy Levels
The "p=" tag dictates your enforcement level. p=none is for monitoring only; fraudulent emails still get delivered. p=quarantine sends fraudulent emails straight to the spam folder. p=reject is the ultimate goal; it completely blocks unauthorized emails from ever reaching the recipient's server.
Alignment Explained
For an email to pass DMARC, it must achieve "alignment" with either SPF or DKIM. This means the domain in the "From" header (what the user sees) must match the domain authenticated by SPF (the Return-Path) or the domain that signed the DKIM cryptographic key. If neither aligns, DMARC fails.
BIMI and Brand Identity
Achieving a DMARC policy of p=quarantine or p=reject unlocks the ability to use BIMI (Brand Indicators for Message Identification). BIMI allows you to display your verified company logo right next to your messages in the recipient's inbox, drastically improving brand visibility, trust, and open rates.