How to Set Up a DMARC Record
DMARC builds on SPF and DKIM, telling receiving servers what to do with mail that fails authentication — and sending you reports. Start gently and tighten over time.
Step-by-step
- Set up SPF and DKIM first and confirm they are valid — DMARC relies on them (see SPF and DKIM).
- Open Domains → Zone Editor and click Manage for your domain.
- Add a TXT record with Name
_dmarcand a value like:v=DMARC1; p=none; rua=mailto:postmaster@yourdomain.com - Start with p=none (monitor only) so you can see reports without affecting delivery.
- Review the aggregate reports that arrive at your rua address over a couple of weeks.
- Tighten the policy to
p=quarantinethenp=rejectonce you confirm legitimate mail passes — see preventing spoofing.
💡 Good to know
- Never start at p=reject — you could block your own mail before confirming it passes.
- DMARC reports are XML and easier to read through a free DMARC report viewer.
- A correct DMARC record also boosts inbox placement at major providers.