Set Up DMARC
Last updated
DMARC is a policy you publish as a TXT record in your DNS zone. It tells receiving mail servers how to handle messages that fail SPF or DKIM checks, and where to send aggregate reports. Your email provider may supply a recommended DMARC value, or you can create one based on the DMARC Record Reference.
Steps to set up DMARC
Set up DMARC
- If you have more than one account, select the relevant one from the account switcher at the top-right corner of the screen.
- On the header, click the tab.
- Locate the relevant domain, and click on the name to access the domain page.
- Click at the top right of the domain page.
- Click , and select .
- In the Name field, enter
_dmarc. -
In the Content field, enter your DMARC policy. A common starting policy looks like this:
v=DMARC1; p=none; rua=mailto:postmaster@example.com - Click .
Tip
The subdomain must be _dmarc. The leading underscore is required. If your provider gives a full hostname like _dmarc.yourdomain.com, only enter _dmarc in the Name field.
Quotes and slashes
If your provider gave you the record with double quotes around it, you can paste it with or without them: DNSimple adds the quotes if they are missing. If the value has backslashes before semicolons (\;), remove the backslashes before you paste it. DNSimple keeps a backslash as part of the value, which breaks the record. See TXT Record Format and Long Record Handling.
Sometimes there will be forward slashes or other unusual characters in the DMARC record. Do not modify those. If you have any questions, contact support.
Managing DMARC records
DMARC records are TXT records. To update or remove them, follow the instructions in How to Use the Record Editor. A domain should have only one DMARC record.
Next steps
After publishing your DMARC record:
- Verify your DMARC record is published correctly.
- Monitor the aggregate reports sent to the address in your
ruatag. A tool like Postmark’s DMARC reporting provides human-readable weekly digests. - Once you are confident legitimate mail is passing, consider implementing a gradual DMARC policy to move from
p=nonetop=quarantineorp=reject.
Have more questions?
If you have additional questions or need assistance with your DMARC records, contact support, and we will be happy to help. You can also read more about DNS hosting at DNSimple.