For a better experience, click the Compatibility Mode icon above to turn off Compatibility Mode, which is only for viewing older websites.

Domain-based Message Authentication Reporting & Conformance (DMARC)

Drexel has implemented DMARC, an email authentication, policy, and reporting protocol, to augment our email security initiative and efforts to combat phishing, email scams and spoofing of our domains.

How DMARC Works

DMARC provides behind the scenes protection against spam, phishing emails and emails that spoof Drexel domains. For additional information on how DMARC works, visit

This protection leverages two processes and technologies to verify emails:


  • Detection as to whether an email message is legitimately from a sender and provides information about how to handle illegitimate emails. For example, a spoofed email may be blocked from reaching your inbox or put into the spam folder.


  • Monitoring and Identification of legitimate senders and approved/verified vendor applications (such as Mail Chimp or Constant Contact), mail servers, etc. that send mailings as Drexel University.


DMARC Implementation and Actions Needed

Everyone at Drexel will be impacted by the implementation of DMARC, but these changes will be transparent to our user community. If you use or support a third-party application or email service sending emails from a university address, please contact the Information Security Team to validate and request DMARC, DKIM, SPF setup.


Contact the Information Security team at or 215.895.1984.