DMARC fail

Neither SPF nor DKIM produced a pass that aligned with the visible From: domain.

What causes it

• SPF passed, but for a different domain than the one in From: — this is an alignment failure, not an SPF failure.
• DKIM signed with a domain that does not align with From:.
• The message was forwarded, breaking SPF, and there was no DKIM signature to fall back on.
• A third-party sender was never authenticated for your domain.

How to fix it

DMARC needs one aligned pass, not both. Check the Authentication-Results header of a failing message: if it shows spf=pass but dmarc=fail, the problem is alignment. Getting DKIM signing configured on your own domain fixes the widest range of cases, because DKIM survives forwarding.

Check your domain

Also searched for: dmarc=fail, dmarc failure, why did dmarc fail.