--- title: "DMARC for Office 365: Complete Setup Guide (2026) | DMARC Report" description: "Set up DMARC for Microsoft 365 (Office 365) step by step. Configure SPF with include:spf.protection.outlook.com, enable DKIM in the admin center, publish your DMARC record, and start monitoring reports." image: "https://dmarcreport.com/og/blog/dmarc-office-365-complete-setup-guide-2026.png" canonical: "https://dmarcreport.com/blog/dmarc-office-365-complete-setup-guide-2026/" --- Quick Answer To set up DMARC for Office 365: (1) configure SPF with include:spf.protection.outlook.com, (2) enable DKIM signing in the Microsoft 365 Defender admin center, (3) publish a DMARC TXT record at dmarc.yourdomain.com, (4) start monitoring aggregate rep Related: [Free DMARC Checker](/tools/dmarc-checker/) Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fdmarc-office-365-complete-setup-guide-2026%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=DMARC%20for%20Office%20365%3A%20Complete%20Setup%20Guide%20%282026%29&url=undefined%2Fblog%2Fdmarc-office-365-complete-setup-guide-2026%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fdmarc-office-365-complete-setup-guide-2026%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fdmarc-office-365-complete-setup-guide-2026%2F&title=DMARC%20for%20Office%20365%3A%20Complete%20Setup%20Guide%20%282026%29 "Share on Reddit") [ ](mailto:?subject=DMARC%20for%20Office%20365%3A%20Complete%20Setup%20Guide%20%282026%29&body=Check out this article: undefined%2Fblog%2Fdmarc-office-365-complete-setup-guide-2026%2F "Share via Email") ![DMARC for Office 365: Complete Setup Guide (2026)](https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-report-4236.jpg) ## Try Our Free DMARC Checker Validate your DMARC policy, check alignment settings, and verify reporting configuration. [ Check DMARC Record → ](/tools/dmarc-checker/) \*\*To set up DMARC for Microsoft 365 (Office 365), you need three DNS records: an SPF record with `include:spf.protection.outlook.com`, DKIM signing enabled via the Microsoft 365 Defender admin center, and a DMARC TXT record at `_dmarc.yourdomain.com`. Microsoft began enforcing DMARC for bulk senders in May 2025, following Google and Yahoo’s February 2024 mandate. Per [RFC 7489](https://datatracker.ietf.org/doc/html/rfc7489), DMARC requires SPF or DKIM to pass AND align with the `From` domain. Microsoft 365 supports both, but DKIM must be explicitly enabled - it’s not on by default for custom domains. ## Step 1: Configure SPF for Office 365 Your SPF record must include Microsoft’s sending IPs: ``` yourdomain.com. IN TXT "v=spf1 include:spf.protection.outlook.com -all" ``` If you also send from other services (SendGrid, Mailchimp, etc.), chain the includes: ``` yourdomain.com. IN TXT "v=spf1 include:spf.protection.outlook.com include:sendgrid.net -all" ``` [Check your SPF record →](/tools/spf-checker/) ## Step 2: Enable DKIM for Office 365 1. Go to **Microsoft 365 Defender** → **Email & collaboration** → **Policies & rules** → **Threat policies** → \*\*DKIM 2\. Select your domain 2. Click \*\*Enable to start DKIM signing 3. If prompted, add the CNAME records Microsoft provides to your DNS Microsoft generates two DKIM selectors (`selector1._domainkey` and `selector2._domainkey`) that point at Microsoft’s key infrastructure. [Verify your DKIM selectors →](/tools/dkim-lookup/) ## Step 3: Publish Your DMARC Record Add a TXT record at `_dmarc.yourdomain.com`: ``` v=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.com ``` Use our [DMARC Record Generator](/tools/dmarc-record-generator/) to build the record with custom settings. ## Step 4: Monitor Reports Point your `rua=` address at [DMARC Report](/) to automatically parse and visualize the aggregate reports Microsoft and other receivers send you. > Office 365 DMARC setup trips up most IT teams on the DKIM step - it’s not enabled by default for custom domains, and the Microsoft admin console buries it three levels deep, says Brad Slavin, General Manager of DuoCircle. Once SPF + DKIM + DMARC are all in place, use DMARC Report to verify everything aligns before enforcing. [Check your DMARC record →](/tools/dmarc-checker/) [Start monitoring with DMARC Report →](https://app.dmarcreport.com/) ## Topics [ DMARC ](/tags/dmarc/)[ email security ](/tags/email-security/) ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) [ Brad Slavin ](/authors/brad-slavin/) General Manager Founder and General Manager of DuoCircle. Product strategy and commercial lead for DMARC Report's 2,000+ customer base. [LinkedIn Profile →](https://www.linkedin.com/in/bradslavin) ## Take control of your DMARC reports Turn raw XML into actionable dashboards. Start free - no credit card required. [Start Free Trial](https://app.dmarcreport.com/) [Check Your DMARC Record](/tools/dmarc-checker/) ## Related Articles [ Foundational 8m 10 Critical Learnings From Verizon’s 2021 DBIR - A DMARCReport Perspective Nov 25, 2025 ](/blog/10-critical-learnings-from-verizons-2021-dbir-a-dmarcreport-perspective/)[ Foundational 12m 10 DNS Blacklist Insights That Improve Email Security And Deliverability Fast Nov 14, 2025 ](/blog/10-dns-blacklist-insights-to-improve-email-security-and-deliverability/)[ Foundational 12m 10 Email Spoofing Detection Tools That Dramatically Improve Brand Protection Nov 11, 2025 ](/blog/10-email-spoofing-detection-tools-that-dramatically-improve-brand-protection/)[ Foundational 12m 10 Reasons SPF Filtering Is Critical For Email Security Nov 19, 2025 ](/blog/10-reasons-spf-filtering-is-critical-for-email-security/) ```json {"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"470","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DMARC Report","url":"https://dmarcreport.com","description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","publisher":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"DMARC for Office 365: Complete Setup Guide (2026)","description":"Set up DMARC for Microsoft 365 (Office 365) step by step. Configure SPF with include:spf.protection.outlook.com, enable DKIM in the admin center, publish your DMARC record, and start monitoring reports.","url":"https://dmarcreport.com/blog/dmarc-office-365-complete-setup-guide-2026/","datePublished":"2026-03-26T00:00:00.000Z","dateModified":"2026-04-16T15:53:43.000Z","dateCreated":"2026-03-26T00:00:00.000Z","author":{"@type":"Person","@id":"https://dmarcreport.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://dmarcreport.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin is the founder and General Manager of DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. He founded DuoCircle in 2014 and has led the company's growth to 2,000+ customers across its email security product family. Brad's focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"470","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://dmarcreport.com/blog/dmarc-office-365-complete-setup-guide-2026/"},"articleSection":"foundational","keywords":"DMARC, email security","wordCount":1800,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-report-4236.jpg","caption":"DMARC for Office 365: Complete Setup Guide (2026)","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://dmarcreport.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://dmarcreport.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://dmarcreport.com/foundational/"},{"@type":"ListItem","position":4,"name":"DMARC for Office 365: Complete Setup Guide (2026)","item":"https://dmarcreport.com/blog/dmarc-office-365-complete-setup-guide-2026/"}]} ```