Move to a stricter DMARC policy

The steps

Your DMARC policy, the p tag, tells mailbox providers what to do with mail that fails DMARC. Mail that passes DMARC is not affected. Move through these steps in order:

1. p=none: mailbox providers deliver mail as they would without DMARC, and send you reports.
2. p=quarantine; pct=25: mailbox providers send a quarter of the failing mail to spam.
3. p=quarantine: mailbox providers send all failing mail to spam.
4. p=reject: mailbox providers refuse failing mail.

Move one step at a time, and wait at least 14 days between steps. The readiness page says when you are ready for the next step and how much of your mail it affects.

Some mailbox providers apply pct to all failing mail or to none of it. At those providers, the 25 percent step sends either all or none of your failing mail to spam.

The sp tag sets the policy for subdomains of example.com. Without it, subdomains follow p.

To step back, publish the previous record again. The record builder keeps your other settings when you change the policy, and your reporting address stays in the rua tag at every step, so reports keep arriving.