Resources - Email Authentication Guides & Reports

Diagram of the new DMARC standard RFC 9989 replacing RFC 7489

education May 2026

RFC 9989: The New DMARC Standard, Explained

DMARC is now an Internet Standard. RFC 9989 obsoletes RFC 7489: a DNS Tree Walk replaces the PSL, the pct tag is removed, and more. Here's what changed.

Pacific Debt Relief DMARC enforcement journey from p=none to p=quarantine

case-study May 2026

Pacific Debt: p=none to p=quarantine in 90 Days

How Pacific Debt Relief moved from 4 years stuck at p=none to active DMARC enforcement in 90 days, and caught a live O365 spoofing attempt along the way.

Step-by-step guide to DMARC setup for Salesforce email

provider-guide Apr 2026

How to Set Up DMARC for Salesforce

Step-by-step guide to configuring SPF, DKIM, and DMARC for Salesforce email sends. Includes DNS records, Email Relay, and troubleshooting.

MSP service portfolio diagram showing DMARC as a recurring revenue offering

partner-content Apr 2026

MSP Guide: Adding DMARC Services to Your Portfolio

How MSPs can offer DMARC monitoring and enforcement as a recurring revenue service using Verkh's partner program.

Chart showing DMARC adoption and enforcement trends for Q1 2026

flagship-report Mar 2026

State of Email Authentication: Q1 2026 Report

Quarterly analysis of DMARC adoption rates, enforcement trends, and email authentication statistics across industries for Q1 2026.

Step-by-step guide to DMARC setup for Klaviyo email marketing

provider-guide Mar 2026

How to Set Up DMARC for Klaviyo

Step-by-step guide to configuring SPF, DKIM, and DMARC for Klaviyo email marketing. Includes DNS records and troubleshooting.

Email authentication requirements for financial services

industry-guide Feb 2026

DMARC for Financial Services Compliance

Email authentication requirements for banks, credit unions, and fintech. How DMARC enforcement meets FFIEC, PCI DSS 4.0, and OCC expectations.

The financial impact of email spoofing broken down by cost category

business-case Feb 2026

The Real Cost of Email Spoofing

Quantify the financial impact of email impersonation and build a business case for DMARC enforcement. Includes an ROI framework.

DMARC implementation guide for healthcare organizations meeting HIPAA requirements

industry-guide Feb 2026

DMARC for Healthcare: HIPAA Compliance

How healthcare organizations can implement DMARC while meeting HIPAA requirements. Covers the Security Rule, vendor coordination, and the path to enforcement.

troubleshooting Jan 2026

DMARC Record Not Found: Causes and How to Fix It

Fix 'no DMARC record found' errors. Covers DNS issues, syntax errors, propagation delays, and external domain permissions.

blog Jan 2026

BIMI FAQ: Brand Logos in Email Inboxes

Answers to common BIMI questions: VMC certificates, SVG requirements, email client support, costs, and troubleshooting.

blog Jan 2026

Why You Need DMARC Enforcement Before BIMI Will Work

BIMI requires DMARC at p=quarantine or p=reject. Learn why and how to reach enforcement to display your logo in email.

Email authentication deliverability guide

setup Jan 2026

How to Authenticate Email and Reach the Inbox

A practical guide to setting up SPF, DKIM, and DMARC so your emails actually get delivered. No fluff, just the steps that matter.

Diagram showing five key benefits of email authentication

best-practices Jan 2026

5 Key Benefits of Email Authentication

Why SPF, DKIM, and DMARC matter for security, deliverability, and brand protection. A practical guide for businesses of all sizes.

Cloudflare DNS dashboard showing DMARC configuration

troubleshooting Dec 2025

Why Cloudflare Says Your DMARC Record is Missing

Your DMARC record exists but Cloudflare's Security Center says it's missing. Here's what's happening and how to verify your setup.

Explanation of the SPF 10 DNS lookup limit

troubleshooting Dec 2025

The SPF 10 DNS Lookup Limit Explained

SPF records are limited to 10 DNS lookups. Learn why this limit exists, how to check your lookup count, and how to fix SPF permerror when you exceed it.

Visual explanation of DMARC alignment concepts

education Dec 2025

DMARC Alignment Explained Simply

DMARC alignment determines whether SPF and DKIM results count. Learn relaxed vs strict alignment and when each matters.

education Dec 2025

p=none vs p=quarantine vs p=reject: Which to Use

The three DMARC policies control what happens to failing email. Learn when to use each and how to safely progress to enforcement.

Why domains get stuck at DMARC none policy

Article Dec 2025

Why 95% of Domains Never Reach DMARC Enforcement

80% of domains with DMARC never reach enforcement. Here is why they stall at p=none, what data triggers an advance, and how to break out of monitoring mode.

How email forwarding affects DMARC authentication

troubleshooting Dec 2025

Why Email Forwarding Breaks DMARC

Email forwarding is the most common cause of legitimate DMARC failures. Learn why it happens and how to handle it.

troubleshooting Dec 2025

Why Am I Not Receiving DMARC Reports?

Set up DMARC but no reports are arriving? Here are the most common reasons and how to fix them, from DNS propagation delays to RUA configuration issues.

Hidden costs of weak DMARC implementation

Article Dec 2025

The Hidden Cost of Staying at p=none

What weak email authentication is actually costing your business — phishing risk, brand damage, deliverability hits, and the deferred cost of staying at p=none.

Google's 5000 email bulk sender threshold explained

compliance Dec 2025

What Counts as a Bulk Sender? The 5,000 Email Rule

Google and Yahoo require DMARC for bulk senders. Learn what counts toward the 5,000 threshold and what happens if you exceed it.

education Dec 2025

Third-Party Senders and DMARC: The Complete Guide

ESPs, CRMs, and marketing platforms send as your domain. Learn how to configure DMARC for third-party senders properly.

Google and Yahoo email sender requirements overview

Article Dec 2025

Google & Yahoo Bulk Sender Rules 2026

Google and Yahoo now require SPF, DKIM, and DMARC for bulk senders. Here's what the requirements actually mean, how enforcement works, and what to do about it.

How to request DKIM fixes from your email provider

guides Dec 2025

How to Ask Your ESP to Fix DKIM (With Templates)

Getting ESP support to help with DKIM is frustrating. Here's how to communicate clearly and get faster resolution.

troubleshooting Nov 2025

What Does SPF Permerror Mean? (And How to Fix It)

SPF permerror means your record has a permanent error. Learn the common causes—syntax errors, too many lookups—and fixes.

education Nov 2025

SPF Softfail vs Hardfail: Which Should You Use?

~all (softfail) vs -all (hardfail) determines how strictly receivers treat SPF failures. Learn which to use and when to switch from softfail to hardfail.

Illustration of multiple SPF records on a domain

troubleshooting Nov 2025

Can I Have Two SPF Records? (No, and Here's Why)

Multiple SPF records cause authentication failures. Learn why, how to check for duplicates, and how to merge them correctly.

Step-by-step SPF record flattening process

guides Nov 2025

How to Flatten Your SPF Record (And When You Should)

SPF flattening replaces includes with IPs to avoid the 10 lookup limit. Learn how it works and whether it's right for you.

Comparison of RUA and RUF DMARC report types

education Nov 2025

RUA vs RUF: Understanding DMARC Report Types

DMARC has two report types: RUA (aggregate) and RUF (forensic). Learn what each contains, which you need, and why most organizations only use RUA.

education Nov 2025

How Long Does DMARC Take to Start Working?

After setting up DMARC, when will you see reports? Learn about DNS propagation, report timing, and realistic expectations.

education Nov 2025

DMARC for Subdomains: Do You Need Separate Records?

Learn how DMARC handles subdomains, when you need separate records, and how to use the sp= tag to control policy.

DMARC requirements for non-bulk email senders

education Nov 2025

Do I Need DMARC If I Don't Send Bulk Email?

Google and Yahoo require DMARC for bulk senders. Learn why DMARC still matters for small senders and non-sending domains.

DKIM key rotation schedule and best practices

guides Oct 2025

How Often Should You Rotate DKIM Keys?

DKIM key rotation improves security but requires planning. Learn rotation schedules, how to rotate safely, and when it matters.

guides Oct 2025

How to Read DMARC XML Reports

DMARC aggregate reports are XML files that look intimidating but follow a predictable structure. Learn to read them manually.

education Oct 2025

What Is BIMI? Brand Logos in Email Explained

BIMI displays your brand logo next to emails in supporting inboxes. Learn the requirements and whether it's worth it.

Common DKIM configuration errors and how to fix them

troubleshooting Oct 2025

5 Common DKIM Mistakes (And How to Fix Them)

DKIM errors cause silent authentication failures. Learn common mistakes—missing records, wrong selectors, key mismatches—and fixes.

DMARC quarantine versus reject policy comparison

education Oct 2025

DMARC Quarantine vs Reject: When to Use Each

Both quarantine and reject enforce DMARC, but with different severity. Learn when to use each and what recipients experience.

Email authentication guide for marketing teams

education Oct 2025

Email Authentication for Marketing Teams

Marketing teams send the most email but don't control authentication. Learn how DMARC affects campaigns and how to work with IT.

Learn email authentication. No jargon required.

Reports & Tools

The State of Email Authentication

DMARC ROI Calculator

Guides

How to Set Up DMARC for Google Workspace

How to Set Up DMARC for Microsoft 365

How to Set Up DMARC with SendGrid

How to Set Up DMARC with Mailchimp

How to Set Up DMARC with Amazon SES

How to Set Up DMARC with HubSpot

Google, Yahoo & Microsoft Bulk Sender Requirements

Understanding DMARC Reports

Why Your SPF Record is Failing

Verkh vs. Other DMARC Platforms

How to Get Your ESP to Fix DKIM Alignment

Vendor Coordination: The Missing Piece of DMARC

Compliance

PCI DSS 4.0 Email Authentication Requirements

Google & Yahoo Sender Requirements (2024)

Blog

RFC 9989: The New DMARC Standard, Explained

Pacific Debt: p=none to p=quarantine in 90 Days

How to Set Up DMARC for Salesforce

MSP Guide: Adding DMARC Services to Your Portfolio

State of Email Authentication: Q1 2026 Report

How to Set Up DMARC for Klaviyo

DMARC for Financial Services Compliance

The Real Cost of Email Spoofing

DMARC for Healthcare: HIPAA Compliance

DMARC Record Not Found: Causes and How to Fix It

BIMI FAQ: Brand Logos in Email Inboxes

Why You Need DMARC Enforcement Before BIMI Will Work

How to Authenticate Email and Reach the Inbox

5 Key Benefits of Email Authentication

Why Cloudflare Says Your DMARC Record is Missing

The SPF 10 DNS Lookup Limit Explained

DMARC Alignment Explained Simply

p=none vs p=quarantine vs p=reject: Which to Use

Why 95% of Domains Never Reach DMARC Enforcement

Why Email Forwarding Breaks DMARC

Why Am I Not Receiving DMARC Reports?

The Hidden Cost of Staying at p=none

What Counts as a Bulk Sender? The 5,000 Email Rule

Third-Party Senders and DMARC: The Complete Guide

Google & Yahoo Bulk Sender Rules 2026

How to Ask Your ESP to Fix DKIM (With Templates)

What Does SPF Permerror Mean? (And How to Fix It)

SPF Softfail vs Hardfail: Which Should You Use?

Can I Have Two SPF Records? (No, and Here's Why)

How to Flatten Your SPF Record (And When You Should)

RUA vs RUF: Understanding DMARC Report Types

How Long Does DMARC Take to Start Working?

DMARC for Subdomains: Do You Need Separate Records?

Do I Need DMARC If I Don't Send Bulk Email?

How Often Should You Rotate DKIM Keys?

How to Read DMARC XML Reports

What Is BIMI? Brand Logos in Email Explained

5 Common DKIM Mistakes (And How to Fix Them)

DMARC Quarantine vs Reject: When to Use Each

Email Authentication for Marketing Teams

Ready to put this knowledge into practice?