Setup of DMARC policies
DMARC stands for Domain-based Message Authentication, Reporting and Conformance. It is an email validation system that protects you from spammers and hackers by not allowing them to send out unauthenticated emails from your company domain thus protecting your brand and customers.
Here is a good example of why you should implement DMARC. Imagine that spammers pretended to be representatives of PayPal and sent you an email from PayPal email address. Would you answer that email and send them the requested information? Even the sensitive one? DMARC will help you to make the right decision. Thanks to DMARC, such forged messages appearing to come from PayPal will be blocked and either immediately removed or marked as spam.
How it works
In order to set up DMARC you will need to adjust some DNS settings. After that mailing service will check whether email is original or it is an unauthenticated fraudulent message sent from your domain. Mail services work fine with the properly setup DMARC policies.
How to set up DMARC for email notifications in your Ecwid store
If you are on Ecwid's Business or Unlimited plan, you can set up DMARC for email notifications in your store.
To send out customer and admin notifications Ecwid uses the Postmark service. Our colleagues from Postmark have a great illustrated instruction on how to set DMARC policies.
In a nutshell, you will need two protecting mechanisms:
- DKIM (Domainkeys Identified Mail) that authenticates emails with help of a secret key;
- SPF (Sender Policy Framework) that checks whether the mail server may deliver emails from your domain.
You can learn more about both methods in the above article by Postmark.
Setup of DMARC policies in Ecwid includes several steps — you will need to add several DNS records for your domain.