Articles in this section

Adding a DMARC record to your DNS

Avatar
Zane P
Updated
Follow

On this page:

Overview

A DMARC record is a security setting for your custom email domain. Major email providers like Google and Yahoo require a DMARC record to ensure your emails are delivered safely to your members' inboxes.

Does this apply to you?

  • If MC Professional manages your domain: We have already added this record for you. You do not need to take action.
  • If you manage your own domain (GoDaddy, Network Solutions, etc.): You must add this record yourself using the steps below.
  • Not sure who manages your domain? Look up your domain on WHOIS Search and check the Registrar field.

What is DMARC?

DMARC stands for Domain-based Message Authentication, Reporting, and Conformance.
In simple terms, it acts like a security guard for your domain. When you send an email, the receiving server looks up your DMARC record to verify that the email actually came from you. It stops scammers from spoofing (faking) your email address.

Before you begin

Do not turn on DMARC until you have set up your SPF and DKIM records first. DMARC relies on both of these tools to work. If you haven't set them up yet, please check our Help Center guides for SPF and DKIM.

How to add a DMARC record

To satisfy the basic security requirements without changing how your current email flows, you can start with a "p=none" policy. This tells receiving servers to monitor your emails but not to block anything yet.

  1. Log into the account where you bought your domain (such as GoDaddy or Network Solutions) and open your DNS Management settings.
  2. Select the option to add a new record and set the type to TXT.
  3. In the Host or Name field, enter exactly: _dmarc
  4. In the Value or Text Content field, paste this basic policy: v=DMARC1; p=none;
  5. Save the record. It may take a few hours for the update to spread across the internet.

Advanced DMARC records (optional)

Once you are comfortable, you can update your DMARC record to get email reports about failed deliveries, or tell servers to quarantine suspicious emails. 

An advanced record looks like this: v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com;

  • p=quarantine: Sends emails that fail security checks straight to the spam/junk folder.
  • rua=mailto: Tells other servers where to send daily security reports.

Additional resources

Related articles