--- title: "DMARC Policy Not Enabled: How to Fix the Error and Protect Your Domain in 2026 | AutoSPF" description: "Fix the DMARC Policy Not Enabled error in 2026 with step-by-step guidance to configure DMARC, SPF, and DKIM for stronger email security and deliverability." image: "https://autospf.com/og/blog/dmarc-policy-not-enabled-fix-protect-domain-in-2026-guide.png" canonical: "https://autospf.com/blog/dmarc-policy-not-enabled-fix-protect-domain-in-2026-guide/" --- Quick Answer A DMARC Policy Not Enabled warning means your domain has no valid DMARC record or is using p=none, which only monitors email authentication. To protect against spoofing and phishing, verify SPF and DKIM, then move your DMARC policy to p=quarantine or p=reject. ## Try Our Free DMARC Checker Validate your DMARC policy, check alignment settings, and verify reporting configuration. [ Check DMARC Record → ](/tools/dmarc-checker/) Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fautospf.com%2Fblog%2Fdmarc-policy-not-enabled-fix-protect-domain-in-2026-guide%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=DMARC%20Policy%20Not%20Enabled%3A%20How%20to%20Fix%20the%20Error%20and%20Protect%20Your%20Domain%20in%202026&url=https%3A%2F%2Fautospf.com%2Fblog%2Fdmarc-policy-not-enabled-fix-protect-domain-in-2026-guide%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fautospf.com%2Fblog%2Fdmarc-policy-not-enabled-fix-protect-domain-in-2026-guide%2F "Share on Facebook") [ ](https://reddit.com/submit?url=https%3A%2F%2Fautospf.com%2Fblog%2Fdmarc-policy-not-enabled-fix-protect-domain-in-2026-guide%2F&title=DMARC%20Policy%20Not%20Enabled%3A%20How%20to%20Fix%20the%20Error%20and%20Protect%20Your%20Domain%20in%202026 "Share on Reddit") [ ](mailto:?subject=DMARC%20Policy%20Not%20Enabled%3A%20How%20to%20Fix%20the%20Error%20and%20Protect%20Your%20Domain%20in%202026&body=Check out this article: https%3A%2F%2Fautospf.com%2Fblog%2Fdmarc-policy-not-enabled-fix-protect-domain-in-2026-guide%2F "Share via Email") ![DMARC policy error fix](https://media.mailhop.org/autospf/spf-lookup-6011-1785928517081.jpg) ## What “DMARC Policy Not Enabled” Means and Why It Matters in 2026 A “dmarc not enabled” message means your domain either has no valid dmarc record or has a dmarc policy set to `p=none`, which only monitors email authentication results without telling receiving mail servers to quarantine or reject suspicious messages. In practical terms, the domain may be publishing a dmarc record, but policy enforcement is not active. DMARC, SPF, and DKIM work together to verify whether incoming email claiming to come from your domain is legitimate. If you are new to the standard, this guide to [DMARC](https://autospf.com/blog/what-is-dmarc-email-authentication-guide/) explains how domain-based message authentication helps fight email spoofing and phishing. A dmarc warning often appears in tools such as MXToolbox, Email Checker, or **Domain Health reports** when the checker detects a none policy rather than a quarantine policy or reject policy. In 2026, this matters because mailbox providers, enterprise gateways, and security platforms increasingly expect stronger email authentication. A **DMARC enforcement** warning can affect [domain reputation](https://www.activecampaign.com/blog/domain-reputation), email security, and deliverability if authentication policies are not properly configured. ### Why a none policy is not enough A none policy is useful during initial monitoring because it allows you to collect a dmarc report without disrupting legitimate traffic. _However, a none policy does not block emails, does not deliver to spam automatically, and does not create real dmarc enforcement. It is a starting point, not an endpoint._ A domain with a valid dmarc record but `p=none` may still trigger a dmarc warning such as “policy not enabled.” That warning means your dmarc policy is not yet **protecting the domain** with a dmarc quarantine policy or dmarc reject policy.![Spf Record Checker 1044](https://media.mailhop.org/autospf/spf-record-checker-1044-1785929309832.jpg) ## Common Causes of the DMARC Policy Not Enabled Error The dmarc not enabled error usually comes from one of several DNS, syntax, or policy issues. Understanding the cause is important before changing policy from none to **quarantine or reject**. ### Missing or incorrectly published DMARC record A dmarc record must be published as a [TXT record](https://www.digicert.com/blog/what-is-a-txt-record) at: ``` _dmarc.yourdomain.com ``` If it is missing from your [DNS records](https://www.ibm.com/think/topics/dns-records), scanners will show dmarc not enabled. If it is published at the root domain instead of the `_dmarc` hostname, or if the TXT value contains formatting errors, the dmarc status may also fail. A basic monitoring dmarc record looks like this: ``` v=DMARC1; p=none; rua=mailto:dmarc-reports@example.com ``` This is valid, but because it uses a **none policy**, some tools still show a dmarc warning because [policy enforcement](https://www.v-comply.com/glossary/policy-enforcement/) is inactive. ### Policy set to p=none The most common reason for a “policy not enabled” or dmarc not enabled alert is that the dmarc policy is set to `p=none`. A none policy tells receivers to take no enforcement action. That means suspicious mail may still reach inboxes, be subject to normal mail filtering, or deliver to spam depending on the receiving platform. Moving to a quarantine policy or reject policy is what turns **monitoring into protection**. A dmarc quarantine policy tells [mail servers](https://www.activecampaign.com/glossary/mail-server) to treat failing messages as suspicious, while a dmarc reject policy tells receivers to block emails that fail authentication and alignment. ### SPF or DKIM alignment problems Even when the dmarc record exists, authentication can fail if your SPF or DKIM setup is incomplete. Your spf record must include the services that send mail for your domain, such as Microsoft 365, [Google Workspace](https://en.wikipedia.org/wiki/Google%5FWorkspace), CRM platforms, ticketing systems, and newsletter tools. SPF accuracy is critical because too many missing senders can cause legitimate messages to fail. DKIM signing is equally important. If you need a refresher, this [DKIM](https://autospf.com/blog/what-is-dkim-email-authentication-guide/) guide covers how cryptographic signatures help receiving systems validate that a message was not altered. _Poor alignment between SPF, DKIM, and the visible From domain can create a dmarc warning even after enabling dmarc._ ![Spf Record 9312](https://media.mailhop.org/autospf/spf-record-9312-1785929270152.jpg) #### DNS propagation and provider-specific issues [DNS troubleshooting](https://www.cloudns.net/blog/dns-troubleshooting-tools-commands/) is also a common part of resolving **DMARC configuration** issues. _Different DNS providers, including Cloudflare, GoDaddy, Namecheap, and Amazon Route 53, may display or manage TXT records differently, but the DMARC record structure remains the same._ Common issues include incorrect hostnames, duplicate TXT records, formatting errors, missing quotation marks, or delays caused by DNS propagation. Before changing your DMARC policy, verify that your record is correctly published at `_dmarc.yourdomain.com` and that receiving mail servers can successfully retrieve it. ## How to Check Your Current DMARC, SPF, and DKIM Configuration Before changing policy, run a full domain check. Use MXToolbox, Cloudflare tools, SecurityTrails.com, Whois, [ICANN lookup data](https://bellingcat.gitbook.io/toolkit/more/all-tools/icann-lookup), and your provider’s Email Health or Domain Health diagnostics to confirm the current dns setup. ### Check DMARC status Look up your dmarc record at `_dmarc.example.com`. Confirm that it begins with `v=DMARC1` and includes a valid dmarc policy, such as: - `p=none` - `p=quarantine` - `p=reject` If the result shows dmarc not enabled, no dmarc record found, or malformed syntax, fix the TXT record first. If the result shows `p=none`, the dmarc configuration exists but enforcement is not active. That is when enabling dmarc properly means planning a policy change toward a quarantine policy or reject policy.![Spf Record Checker 1022](https://media.mailhop.org/autospf/spf-record-checker-1022-1785929346449.jpg) ### Check SPF and DKIM Review your SPF Record to confirm all authorized sending sources are included. Tools such as MXToolbox, Email Checker, and AutoSPF can help identify lookup-limit problems, missing senders, and flattening issues; [AutoSPF](https://autospf.com/) is especially useful when multiple vendors affect **SPF accuracy**. Next, verify DKIM selectors for every email platform. _Cloudflare, Google Workspace, Microsoft 365, HubSpot, Mailchimp, Zendesk, and other mail servers may each require their own DNS records._ If one major sender lacks DKIM, your dmarc report may show failures that delay dmarc enforcement. #### Sources to review during a domain setup audit When troubleshooting DMARC issues, review your DNS provider documentation, [email service provider](https://www.icontact.com/define/email-service-provider/) settings, and authentication reports. Checking your DNS records, SPF configuration, DKIM selectors, and DMARC reports can help identify missing records, alignment failures, and policy configuration problems. A complete **email authentication** audit ensures that legitimate senders are authorized and your domain is ready for stronger DMARC enforcement. ## Step-by-Step Fix: Creating or Updating Your DMARC Record Fixing the dmarc not enabled error usually means creating a valid dmarc record or moving from a none policy to a dmarc quarantine policy or dmarc reject policy. ### Step 1: Create the TXT record In your DNS provider, create a TXT record with: - Name/Host: `_dmarc` - Type: `TXT` - Value: `v=DMARC1; p=none; rua=mailto:dmarc-reports@example.com` This enables monitoring and gives you a dmarc report stream. Add the TXT record through your **DNS provider’s management panel**. The process is similar across providers, including domain registrars and managed DNS platforms.![Spf Record Syntax 3168](https://media.mailhop.org/autospf/spf-record-syntax-3168-1785929398676.jpg) ### Step 2: Validate syntax and reporting After publishing the dmarc record, run another domain check with MXToolbox or another Email Health scanner. If the dmarc warning disappears but the tool still says policy not enabled, your record is valid but still using a none policy. At this stage, review aggregate reports for legitimate senders, unauthorized sources, and [spoofed emails](https://www.infosecurity-magazine.com/news/infosec2025-email-domains-spoofing/). This helps you **prevent mail filtering problems** before switching to a quarantine policy or reject policy. #### Example starter and enforcement records Starter none policy: ``` v=DMARC1; p=none; rua=mailto:dmarc-reports@example.com; adkim=s; aspf=s ``` dmarc quarantine policy: ``` v=DMARC1; p=quarantine; pct=25; rua=mailto:dmarc-reports@example.com ``` dmarc reject policy: ``` v=DMARC1; p=reject; rua=mailto:dmarc-reports@example.com ``` The first dmarc record monitors. The second uses a **quarantine policy**. The third uses a reject policy. Each dmarc policy should be tested before full policy enforcement. #### Using a wizard safely A wizard, including a Cloudflare Wizard or third-party setup steps tool, can simplify the process, but always inspect the generated dmarc record manually. Make sure the dmarc policy matches your goal, reporting addresses are correct, and the policy change does not accidentally block emails from legitimate systems. ## Best Practices for Moving from p=none to p=quarantine or p=reject Changing policy should be gradual. The best practice is to start with a none policy, monitor reports, fix SPF and **DKIM alignment**, then move to a dmarc quarantine policy before adopting a dmarc reject policy.![Spf Flattening 5233](https://media.mailhop.org/autospf/spf-flattening-5233-1785928955728.jpg) ### Move gradually from none to quarantine Once your dmarc report data shows that legitimate mail passes authentication, change the dmarc policy from `p=none` to `p=quarantine`. Many organizations begin with: ``` v=DMARC1; p=quarantine; pct=25; rua=mailto:dmarc-reports@example.com ``` This dmarc quarantine policy applies quarantine to only a portion of failing mail. Over time, increase `pct=25` to `pct=50`, then `pct=100`. A quarantine policy is safer than an immediate **reject policy** because it allows receivers to [deliver to spam](https://pressgazette.co.uk/publishers/digital-journalism/facebook-spam-posts-independent-small-news-publishers/) rather than fully [block emails](https://blog.superhuman.com/how-to-block-emails/). The phrase dmarc quarantine policy matters because it represents real enforcement. A dmarc quarantine policy reduces exposure to email spoofing while limiting the risk of disrupting legitimate incoming email workflows, forwards, and third-party senders. ### Move from quarantine to reject After the quarantine policy has been stable, move to a reject policy. A dmarc reject policy is the **strongest protection** because it tells receivers to reject unauthenticated mail using your domain. This is the preferred end state for mature [email security](https://autospf.com/blog/email-security-protocols-essential-for-your-security-strategy/) programs. A cautious dmarc reject policy might start with: ``` v=DMARC1; p=reject; pct=25; rua=mailto:dmarc-reports@example.com ``` Then increase toward full dmarc enforcement. A reject policy and full policy enforcement help stop spoofed emails before they reach users. The dmarc reject policy is especially important for finance, healthcare, SaaS, ecommerce, and any [organization targeted by phishing](https://www.securityweek.com/microsoft-warns-of-sophisticated-phishing-campaign-targeting-us-organizations/). ### Operational safeguards before enforcement Before enabling dmarc at enforcement level, verify: - Every authorized sender is covered by SPF or DKIM. - The spf record is valid and does not exceed [DNS lookup](https://www.zoho.com/toolkit/dns-lookup.html) limits. - DKIM is enabled for all major sending platforms. - Forwarding services and mailing lists are reviewed. - Your dmarc record includes a monitored reporting address. - Your email deliverability metrics remain stable after each policy change. Enabling dmarc is not just a DNS task; enabling dmarc is an operational email security process. If a dmarc warning remains after enabling dmarc, re-check alignment, **DNS propagation**, duplicate dns records, and whether the scanner expects a quarantine policy or reject policy instead of a none policy. ![Brad Slavin](https://media.mailhop.org/autospf/images/authors/brad-slavin.jpg) [ Brad Slavin ](/authors/brad-slavin/) General Manager Founder and General Manager of DuoCircle. Product strategy and commercial lead for AutoSPF's 2,000+ customer base. [LinkedIn Profile →](https://www.linkedin.com/in/bradslavin) ## Ready to get started? Try AutoSPF free — no credit card required. [ Book a Demo ](/book-a-demo/) Scan Your Domain Now Instantly scan your domain for DKIM, SPF, and DMARC issues Check My Domain Share this article [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fautospf.com%2Fblog%2Fdmarc-policy-not-enabled-fix-protect-domain-in-2026-guide%2F) [ ](https://twitter.com/intent/tweet?text=DMARC%20Policy%20Not%20Enabled%3A%20How%20to%20Fix%20the%20Error%20and%20Protect%20Your%20Domain%20in%202026&url=https%3A%2F%2Fautospf.com%2Fblog%2Fdmarc-policy-not-enabled-fix-protect-domain-in-2026-guide%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fautospf.com%2Fblog%2Fdmarc-policy-not-enabled-fix-protect-domain-in-2026-guide%2F) Copy Related Articles - [ ![DIY-ing SPF](https://media.mailhop.org/autospf/images/2024/04/spf-record-example-5874.jpg) 10 Reasons Why DIY-ing SPF isn’t a Good Choice for Companies Intermediate ](/blog/10-reasons-diy-ing-spf-isnt-good-choice-for-companies/) - [ ![phishing actors](https://media.mailhop.org/autospf/images/2025/11/spf-record-checker-0096.jpg) The 12.4 billion shield for your email communications: Why DMARC software is the unsung hero in the war against phishing actors! Intermediate ](/blog/12-4-billion-dmarc-software-shield-protecting-email-from-phishing-actors/) - [ ![SPF record](https://media.mailhop.org/autospf/images/2025/05/spf-record-generator-9003.jpg) 3 points to consider before setting your SPF record to -all (HardFail) Intermediate ](/blog/3-points-to-consider-before-setting-your-spf-record-hardfail/) - [ ![421 Error SMTP Guide](https://media.mailhop.org/autospf/spf-lookup-1607-1785756872932.jpg) 421 Error SMTP Survival Guide: Fix the 4.4.2 Connection Dropped Issue Intermediate ](/blog/421-error-smtp-survival-guide-fix-connection-dropped-email-issue/) ## Related Articles [ Intermediate 6m 10 Reasons Why DIY-ing SPF isn’t a Good Choice for Companies Apr 4, 2024 ](/blog/10-reasons-diy-ing-spf-isnt-good-choice-for-companies/)[ Intermediate 5m The 12.4 billion shield for your email communications: Why DMARC software is the unsung hero in the war against phishing actors! Nov 19, 2025 ](/blog/12-4-billion-dmarc-software-shield-protecting-email-from-phishing-actors/)[ Intermediate 3m 3 points to consider before setting your SPF record to -all (HardFail) May 22, 2025 ](/blog/3-points-to-consider-before-setting-your-spf-record-hardfail/)[ Intermediate 421 Error SMTP Survival Guide: Fix the 4.4.2 Connection Dropped Issue Aug 3, 2026 ](/blog/421-error-smtp-survival-guide-fix-connection-dropped-email-issue/) ```json {"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138897474","https://www.linkedin.com/company/autospf","https://x.com/autospf01","https://www.g2.com/products/autospf/reviews"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://autospf.com/contact-us/"},"knowsAbout":["SPF Record Flattening","Sender Policy Framework","Email Authentication","DNS Management","DMARC","DKIM"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"AutoSPF","url":"https://autospf.com","description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","publisher":{"@type":"Organization","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"DMARC Policy Not Enabled: How to Fix the Error and Protect Your Domain in 2026","description":"Fix the DMARC Policy Not Enabled error in 2026 with step-by-step guidance to configure DMARC, SPF, and DKIM for stronger email security and deliverability.","url":"https://autospf.com/blog/dmarc-policy-not-enabled-fix-protect-domain-in-2026-guide/","datePublished":"2026-08-05T00:00:00.000Z","dateModified":"2026-08-05T00:00:00.000Z","dateCreated":"2026-08-05T00:00:00.000Z","author":{"@type":"Person","@id":"https://autospf.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://autospf.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin is the founder and General Manager of DuoCircle, the company behind AutoSPF, DMARC Report, Phish Protection, and Mailhop. He founded DuoCircle in 2014 to solve the SPF 10-DNS-lookup problem at scale and has led the company's growth to 2,000+ customers. Brad's focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement) rather than hands-on DNS engineering.","image":"https://media.mailhop.org/autospf/images/authors/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"AutoSPF","url":"https://autospf.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138897474","https://www.linkedin.com/company/autospf","https://x.com/autospf01","https://www.g2.com/products/autospf/reviews"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://autospf.com/contact-us/"},"knowsAbout":["SPF Record Flattening","Sender Policy Framework","Email Authentication","DNS Management","DMARC","DKIM"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://autospf.com/blog/dmarc-policy-not-enabled-fix-protect-domain-in-2026-guide/"},"articleSection":"intermediate","keywords":"","image":{"@type":"ImageObject","url":"https://media.mailhop.org/autospf/spf-lookup-6011-1785928517081.jpg","caption":"DMARC policy error fix"},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://autospf.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://autospf.com/blog/"},{"@type":"ListItem","position":3,"name":"Intermediate","item":"https://autospf.com/intermediate/"},{"@type":"ListItem","position":4,"name":"DMARC Policy Not Enabled: How to Fix the Error and Protect Your Domain in 2026","item":"https://autospf.com/blog/dmarc-policy-not-enabled-fix-protect-domain-in-2026-guide/"}]} ```