Where do I publish a DMARC record?
Still have a question, spotted an error, or have a better explanation or a source we should cite?
DMARC records go in your DNS as a TXT record at a specific subdomain. The address is always the same format:
_dmarc.yourdomain.com
So if If your sending domain is deepcurrent.io, the record lives at _dmarc.deepcurrent.io. That's where every mailbox provider looks for your DMARC policy when they receive mail from your domain.
How to publish it step by step
Log into wherever you manage DNS. That's usually your domain registrar (Namecheap, GoDaddy, Google Domains) or a DNS provider you've delegated to (Cloudflare, Route 53). Add a new TXT record with these values:
- Name/Host:
_dmarc(some providers want just_dmarc, others want the full_dmarc.yourdomain.com. Check your provider's format.) - Type: TXT
- Value: your DMARC policy string, e.g.
v=DMARC1; p=none; rua=mailto:reports@yourdomain.com
If you don't have a DMARC record yet and need to build one, our DMARC generator walks you through each option. Starting with p=none (monitoring mode) is the safest place to begin if you're not sure your authentication is clean yet.
How to verify it published correctly
Give DNS 15 to 60 minutes to propagate after saving. Then paste your domain into our DMARC parser to confirm the record is live and parses correctly.
If the parser can't find it, the most common mistake is publishing at dmarc.yourdomain.com instead of _dmarc.yourdomain.com (missing the underscore). The SOS hotline is free if you're still stuck after double-checking.
Contributors
Who worked on this answer
Every name links to their profile. Every company links to their site. Real people, real accountability.