---
title: "Why do DMARC reports have a limit of 32KB? | DMARC Report"
description: "DMARC (RFC 7489) ties SPF and DKIM together by requiring alignment between the envelope sender and the visible From header."
image: "https://dmarcreport.com/og/blog/why-do-dmarc-reports-have-a-limit-of-32kb.png"
canonical: "https://dmarcreport.com/blog/why-do-dmarc-reports-have-a-limit-of-32kb/"
---

Quick Answer

DMARC (RFC 7489) ties SPF and DKIM together by requiring alignment between the envelope sender and the visible \`From\` header. According to Google's February 2024 bulk sender requirements, a DMARC policy of at least \`p=none\` is now mandatory for any domain sending 5,000+ messages per day to Gmail users. DMARC Report

Related: [Free DMARC Checker](/tools/dmarc-checker/) ·[How to Create an SPF Record](/tools/spf-record-generator/) ·[SPF Record Format](/blog/spf-format-checker-dos-and-donts-for-email-authentication/) 

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fwhy-do-dmarc-reports-have-a-limit-of-32kb%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Why%20do%20DMARC%20reports%20have%20a%20limit%20of%2032KB%3F&url=undefined%2Fblog%2Fwhy-do-dmarc-reports-have-a-limit-of-32kb%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fwhy-do-dmarc-reports-have-a-limit-of-32kb%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fwhy-do-dmarc-reports-have-a-limit-of-32kb%2F&title=Why%20do%20DMARC%20reports%20have%20a%20limit%20of%2032KB%3F "Share on Reddit") [ ](mailto:?subject=Why%20do%20DMARC%20reports%20have%20a%20limit%20of%2032KB%3F&body=Check out this article: undefined%2Fblog%2Fwhy-do-dmarc-reports-have-a-limit-of-32kb%2F "Share via Email") 

![Why do DMARC reports have a limit of 32KB?](https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-report-4236.jpg) 

## Try Our Free DMARC Checker

Validate your DMARC policy, check alignment settings, and verify reporting configuration.

[ Check DMARC Record → ](/tools/dmarc-checker/) 

![Dmarc office 365 1552 150x150](https://media.mailhop.org/dmarcreport/images/2025/07/dmarc-office-365-1552-150x150.jpg) 

> DMARC reporting without automation is like watching security cameras without recording, says Brad Slavin, General Manager of DuoCircle. You see the threats in real time but you can’t go back and investigate. DMARC Report captures and classifies every aggregate and forensic report so your security team has a complete audit trail.

DMARC ([RFC 7489](https://datatracker.ietf.org/doc/html/rfc7489)) ties SPF and DKIM together by requiring alignment between the envelope sender and the visible `From` header. According to Google’s February 2024 bulk sender requirements, a DMARC policy of at least `p=none` is now mandatory for any domain sending 5,000+ messages per day to Gmail users. DMARC Report

Why do DMARC reports have a limit of 32KB?

```
					<button title="Play" aria-label="Play Episode" aria-pressed="false" class="play-btn">
						
```

Play Episode

```
					</button>
					<button title="Pause" aria-label="Pause Episode" aria-pressed="false" class="pause-btn hide">
						
```

Pause Episode

```
					</button>
				

					<audio preload="none" class="clip clip-30120">
						<source src="https://media.mailhop.org/dmarcreport/images/2025/07/Why-do-DMARC-reports-have-a-limit-of-32KB.mp3">
					</audio>
						

							<button class="player-btn player-btn__volume" title="Mute/Unmute">
								
```

Mute/Unmute Episode

```
							</button>
							<button data-skip="-10" class="player-btn player-btn__rwd" title="Rewind 10 seconds">
								
```

Rewind 10 Seconds

```
							</button>
							<button data-speed="1" class="player-btn player-btn__speed" title="Playback Speed" aria-label="Playback Speed">1x</button>
							<button data-skip="30" class="player-btn player-btn__fwd" title="Fast Forward 30 seconds">
								
```

Fast Forward 30 seconds

```
							</button>
						

							<time class="ssp-timer">00:00</time>
							
```

/

```
							<!-- We need actual duration here from the server -->
							<time class="ssp-duration" datetime="PT0H1M58S">1:58</time>
			

								<nav class="player-panels-nav">
												<button class="subscribe-btn" id="subscribe-btn-30120" title="Subscribe">Subscribe</button>
																		<button class="share-btn" id="share-btn-30120" title="Share">Share</button>
										</nav>

						
```

RSS Feed

```
							<input value="https://dmarcreport.com/feed/podcast/dmarc-report" class="input-rss input-rss-30120" title="RSS Feed URL" readonly />
						

						<button class="copy-rss copy-rss-30120" title="Copy RSS Feed URL" aria-label="Copy RSS Feed URL"></button>
					

						Share						
					

						<a href="https://www.facebook.com/sharer/sharer.php?u=https://dmarcreport.com/blog/podcast/why-do-dmarc-reports-have-a-limit-of-32kb/&t=Why do DMARC reports have a limit of 32KB?" target="blank" rel="noopener noreferrer" class="share-icon facebook" title="Share on Facebook">
							

						</a>
						<a href="https://twitter.com/intent/tweet?text=https://dmarcreport.com/blog/podcast/why-do-dmarc-reports-have-a-limit-of-32kb/&url=Why do DMARC reports have a limit of 32KB?" target="blank" rel="noopener noreferrer" class="share-icon twitter" title="Share on Twitter">
							

						</a>
						<a href="https://media.mailhop.org/dmarcreport/images/2025/07/Why-do-DMARC-reports-have-a-limit-of-32KB.mp3" target="blank" rel="noopener noreferrer" class="share-icon download" title="Download" download>
							

						</a>
					

						Link						
					

						<input value="https://dmarcreport.com/blog/podcast/why-do-dmarc-reports-have-a-limit-of-32kb/" class="input-link input-link-30120" title="Episode URL" readonly />
					

					<button class="copy-link copy-link-30120" title="Copy Episode URL" aria-label="Copy Episode URL" readonly=""></button>
					

						Embed						

					
```

/\*! This file is auto-generated \*/ ’ title=“Embed Code” class=“input-embed input-embed-30120” readonly/>

```
					<button class="copy-embed copy-embed-30120" title="Copy Embed Code" aria-label="Copy Embed Code"></button>


```

There are various rules around DMARC, most of which are defined by [DMARC RFC 7489](https://www.rfc-editor.org/info/rfc7489), but there’s one that is not imposed by the protocol. It’s the 32KB report size limit. This limit is enforced not by DMARC itself but by mail providers, due to certain operational constraints.

Major [email service providers (ESPs)](https://www.campaignmonitor.com/resources/glossary/email-service-provider-esp/) like [Gmail and Yahoo](https://dmarcreport.com/blog/google-and-yahoos-new-email-authentication-policy-for-2024/) have set a limit of 32KB on **DMARC aggregate reports (RUA)**, so anything larger than that is either cut off, partially delivered, or sometimes not sent at all.

This becomes a major problem if you send a large volume of emails every day - say, around **100,000 emails**. In such cases, you might end up receiving the DMARC report for only half of them. The rest either get dropped or never make it to your reporting address, leaving you with an incomplete view of your domain’s authentication activity.

![Dmarc check](https://media.mailhop.org/dmarcreport/images/2025/07/dmarc-check-5697.jpg) 

In this article, we will explore what the 32KB threshold is all about and why ESPs even impose this limit.

## Why do ESPs need a 32KB limit?

DMARC [XML reports](https://developer.adobe.com/commerce/php/development/advanced-reporting/report-xml/) are very well-rounded and capture almost everything about your domain’s email activity, from the IP addresses sending email on your behalf to [DKIM signatures](https://docs.mapp.com/docs/dkim-signature), [SPF](https://autospf.com/blog/spf-guide-understanding-sender-policy-framework/) results, **subdomain usage**, and policy dispositions. So, naturally, these reports get very heavy. And if you’re using multiple platforms or [third-party services](https://www.websitepolicies.com/blog/third-party-service-provider) to send emails, the report becomes even heavier. This makes it very difficult for the receiving mailbox providers to process and transfer these reports efficiently. So, to avoid any delays or failures in delivery, these ESPs enforce a **32KB limit**.

## What happens when you exceed this limit?

_Most often, mail providers cannot handle large DMARC reports as attachments once they cross the 32KB threshold_. When that happens, you encounter one of three things:

![Dmarc record](https://media.mailhop.org/dmarcreport/images/2025/07/dmarc-record-4566.jpg) 
- Your reports are truncated, which means they are cut off halfway, and you only receive a \*\*partial report that fits the 32KB limit. Everything beyond that gets silently dropped, leaving you with an incomplete view of your domain’s email activity .
- Your [DMARC reports](https://dmarcreport.com/blog/how-to-read-dmarc-reports-guide-2026/) aren’t sent at all. Some mailbox providers simply discard oversized reports without any [warning or error message](https://www.ibm.com/docs/en/tcamfma/6.3.0?topic=t-informational-warning-error-messages-4).
- Your reports are split into multiple smaller reports, each under the size limit. Although this may not seem like a problem, its inconsistent implementation across providers can make it challenging to track and stitch together. In all three cases, you lose critical visibility, and that can mean missing [signs of spoofing](https://www.jumio.com/7-types-of-identity-spoofing-how-to-spot-and-stop-them/), misconfigurations, or giving way to unauthorized activity.
![Dmarc alignment](https://media.mailhop.org/dmarcreport/images/2025/07/dmarc-alignment-4567.jpg) 

## What can you do to stay within the limit?

\*\*Staying within the 32KB limit can be tricky, especially because most [mailbox providers](https://en.wikipedia.org/wiki/Mailbox%5Fprovider) don’t tell you when you’ve crossed it. You might assume your reports are complete when in reality, a chunk of them may be missing. So, it’s best that you stay on top of things right off the bat.![What is dmarc](https://media.mailhop.org/dmarcreport/images/2025/07/what-is-dmarc-4678.jpg)

Here’s how you can stay within the limit:

- Minimize the number of sending sources
- Avoid unnecessary [subdomain reporting](https://www.cscdbs.com/en/resources-news/subdomain-hijacking-vulnerabilities-report/)
- Delegate subdomains with separate [DMARC records](https://dmarcreport.com/dmarc-record/)
- Regularly audit third-party senders
- Use [DMARC](https://dmarcreport.com/) analytics tools to detect gaps in your DMARC reports

Need help managing and monitoring your DMARC reports? \*\*Our team is here to assist! [Contact us today](https://dmarcreport.com/contact/) to learn more.

## Topics

[ dkim ](/tags/dkim/)[ DMARC ](/tags/dmarc/)[ dmarc record ](/tags/dmarc-record/)[ SPF ](/tags/spf/) 

![Vasile Diaconu](https://media.mailhop.org/dmarcreport/images/team/vasile-diaconu.jpg) 

[ Vasile Diaconu ](/authors/vasile-diaconu/) 

Operations Lead

Operations Lead at DuoCircle. Runs project management, developer coordination, and technical support execution for DMARC Report.

[LinkedIn Profile →](https://www.linkedin.com/in/vasile-diaconu/) 

## Take control of your DMARC reports

Turn raw XML into actionable dashboards. Start free - no credit card required.

[Start Free Trial](https://app.dmarcreport.com/) [Check Your DMARC Record](/tools/dmarc-checker/) 

## Related Articles

[  Foundational 7m  4 sectors that need email authentication the most and why  Oct 15, 2024 ](/blog/4-sectors-that-need-email-authentication-the-most-and-why/)[  Foundational 4m  8 Misconceptions About DMARC and its Deployment for Businesses  Dec 4, 2023 ](/blog/8-misconceptions-about-dmarc-and-its-deployment-for-businesses/)[  Foundational 8m  9 technologies to protect your emails from cyber actors  Dec 10, 2024 ](/blog/9-technologies-to-protect-your-emails-from-cyber-actors/)[  Foundational 14m  Add TXT Record on Namecheap (SPF, DKIM & DMARC) - 2026  Mar 5, 2025 ](/blog/add-txt-record-on-namecheap-a-complete-dns-guide/)

```json
{"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"470","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DMARC Report","url":"https://dmarcreport.com","description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","publisher":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"Why do DMARC reports have a limit of 32KB?","description":"DMARC (RFC 7489) ties SPF and DKIM together by requiring alignment between the envelope sender and the visible From header.","url":"https://dmarcreport.com/blog/why-do-dmarc-reports-have-a-limit-of-32kb/","datePublished":"2025-07-31T06:50:25.000Z","dateModified":"2026-04-16T15:53:43.000Z","dateCreated":"2025-07-31T06:50:25.000Z","author":{"@type":"Person","@id":"https://dmarcreport.com/authors/vasile-diaconu/#person","name":"Vasile Diaconu","url":"https://dmarcreport.com/authors/vasile-diaconu/","jobTitle":"Operations Lead","description":"Vasile Diaconu is the Operations Lead at DuoCircle, the company behind DMARC Report and AutoSPF. He coordinates between engineering, product, and technical support - running project management, interfacing with developers on customer-reported issues, and making sure work that comes in through the support channel actually gets closed out. Vasile sits at the intersection of customer feedback and engineering execution, giving him a direct view of which email authentication problems customers hit most often in production.","image":"https://media.mailhop.org/dmarcreport/images/team/vasile-diaconu.jpg","knowsAbout":["SaaS Operations","Technical Support Coordination","Customer Issue Resolution","Engineering Program Management","Deployment Operations"],"worksFor":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com"},"sameAs":["https://www.linkedin.com/in/vasile-diaconu/"]},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"470","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://dmarcreport.com/blog/why-do-dmarc-reports-have-a-limit-of-32kb/"},"articleSection":"foundational","keywords":"dkim, DMARC, dmarc record, SPF","wordCount":885,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-report-4236.jpg","caption":"Why do DMARC reports have a limit of 32KB?","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://dmarcreport.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://dmarcreport.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://dmarcreport.com/foundational/"},{"@type":"ListItem","position":4,"name":"Why do DMARC reports have a limit of 32KB?","item":"https://dmarcreport.com/blog/why-do-dmarc-reports-have-a-limit-of-32kb/"}]}
```