DMARC MonitorSign in with your passkey — Touch ID, Face ID, or a security key.
You've been invited. Create a passkey on this device to finish.
Enrolled. Now add this TXT record at the domain's DNS host:
Verification is re-checked automatically on every sync — the (unverified) tag clears on its own once DNS propagates. This record stays available under ✎ for the domain.
Devices that can sign in to your account. Add your phone or a backup key so you're never locked out.
| Name | Added | Last used |
|---|
You're signed in with the break-glass admin token, which has no passkeys. Create a passkey-backed admin account from the Accounts panel to manage devices here.
Group accounts see only their groups, read-only. Admin accounts see everything. Each account signs in with a passkey created via its invite link.
Send this single-use activation link (expires in 3 days):
Sends automatically on the 1st to every client with a "Client report email" set (✎ on a domain). Nothing sends for clients without one.
| Domain | Client | Policy | Messages | Pass rate | Trend | Failing | Alerts | Advice |
|---|
| Source IP | Host | Origin | Looks like | SPF | Domains | Messages | Failed | Pass rate | Last seen |
|---|
| Source IP | Host | Looks like | SPF | Domains | Messages | DKIM+SPF | DKIM only | SPF only | Last seen |
|---|
| Domain | Reporter | Period | Messages | Pass rate |
|---|