Hosted DMARC lets you manage your DMARC policy from the Suped dashboard. Instead of editing TXT records in your DNS provider, you point a CNAME to Suped and control everything from the UI.
How it works
Suped hosts your DMARC record behind a CNAME. When receivers look up _dmarc.yourdomain.com, the CNAME resolves to Suped's infrastructure, which serves the DMARC record you've configured in the dashboard.
Setup
- Go to Settings > Domains and click your domain
- Navigate to the DMARC tab
- Enable hosted DMARC
- Add a CNAME record in your DNS:
- Host:
_dmarc.yourdomain.com - Value: The alias shown in your Suped dashboard
- Host:
- Suped will verify the CNAME and activate hosted DMARC
Managing your policy
Once hosted DMARC is active, you can change your DMARC policy directly from the dashboard:
- None - Monitor only. Unauthenticated emails are delivered normally.
- Quarantine - Unauthenticated emails are sent to spam.
- Reject - Unauthenticated emails are blocked entirely.
Changes take effect immediately since the CNAME stays the same - only the record Suped serves behind it changes.
Automatic reporting
When you enable hosted DMARC, Suped is automatically added as a reporting destination in the rua tag. You don't need to manually configure reporting addresses.
Policy staging
You don't have to apply a strict policy to 100% of your email at once. Use percentage-based application to gradually roll out stricter policies:
- Start with
p=quarantineapplied to a small percentage (e.g. 10%) - Monitor the results in your DMARC reports
- Gradually increase the percentage as you confirm legitimate sources are passing
- Once you're at 100% quarantine with no issues, move to
p=reject
This staged approach lets you catch any misconfigured sources before they start losing email.
