Welcome toiO™ DMARC
You just took the single most important step to protect your email, your domain, and your reputation. Now it's time to get you setup! Pick a day and time, and provide your details in the calendar. Then, scroll down to see what comes next.
Schedule Your Onboarding Call
Select a day and time, then answer the questions to schedule your iO™ DMARC onboarding call with an Input Output security architect.
iO™ DMARC Implementation Next Steps
Here is what to expect, and what to do, to get the most out of your iO™ DMARC subscription.
Before Your Call - Quick Prep
Before your onboarding call, be sure to get the following pulled together:
- Access to your DNS settings. This is typically managed through GoDaddy, Cloudflare, Namespace, etc. This can also be with your web hosting provider.
- A list of services that send email using your domain name. These typically include M365, Google, CRMs (Hubspot, Zoho, etc.), marketing platforms (Mailchimp, Constant Contact, etc.), Helpdesk or ticketing systems, billing software, and even your website. List any you can think of.
DNS AccessIdentify Sending Sources
Onboarding Day
During Your Onboarding
On your scheduled call, we'll:
- Review your current SPF, DKIM, and DMARC records
- Configure your legitimate sending sources
- Configure and publish your authentication records
- Connect your domain to iO™ DMARC monitoring
- Set your initial DMARC policy and explain what the reports will show you
- Configure MTA-STS and TLS-RPT reporting
- Configure any additional users for your iO™ DMARC platform
- Answer any questions you have about email security and deliverability
First Few Days
24-48 Hours After Onboarding
After your onboarding is where iO™ DMARC really kicks in.
- Within 24–48 hours, you'll start receiving DMARC reports showing exactly who's sending email from your domain.
- We'll review your first reports with you and flag anything that needs attention, like unauthorized senders or misconfigurations we catch early.
Tightening Things Up
30-60 Days After Onboarding
Depending on your email volume (and sending complexity), over the next 30-60 days of monitoring, we'll work with you to:
- Tighten your DMARC policy from monitoring (p=none), to flagging (p=quarantine), and finally to the full protection (p=reject).
- Identify any other legitimate sending sources that were missed and get them configured.
BIMI & Advanced
60-90 Days After Onboarding
Once your DMARC is fully configured (p=reject), then it's time to further enhance your email deliverability and security.
- Configure BIMI. iO™ DMARC will help you configure your records and even properly optimize and host your logo.
- Tighten your incoming email security by enforcing MTA-STS.
DMARC, BIMI & Beyond
Ongoing
Your domain stays monitored. If something changes, like a new sender, a misconfiguration, a blacklist hit, iO™ DMARC will let you know about it. With the continued monitoring and management you'll enjoy:
- Better email deliverability
- Enhanced security on incoming emails
- Prevent illegitimate usage of your domain name (spoofing)
Questions Before Your Call
Here are a few common questions others have had. Of course, you're always welcome to reach out to us directly.
- What if I don't know where my DNS is managed?
- Do I need to be technical for this call?
- What if I forget a sending platform?
- Can someone from my IT team or MSP join the call?
- What if I don't have access to my DNS settings?
- Can I add additional users to my iO™ DMARC portal?
- Do I have to transfer my DNS management to iO™ DMARC?
- Why can't I start with the strongest security upfront, DMARC p=reject?
- Why can't we setup BIMI during onboarding?
Need Help Before Your Call?
Have questions before your onboarding? We are here to help.