Where do I publish a DMARC record?

Still have a question, spotted an error, or have a better explanation or a source we should cite?

DMARC records go in your DNS as a TXT record at a specific subdomain. The address is always the same format:

_dmarc.yourdomain.com

So if If your sending domain is deepcurrent.io, the record lives at _dmarc.deepcurrent.io. That's where every mailbox provider looks for your DMARC policy when they receive mail from your domain.

How to publish it step by step

Log into wherever you manage DNS. That's usually your domain registrar (Namecheap, GoDaddy, Google Domains) or a DNS provider you've delegated to (Cloudflare, Route 53). Add a new TXT record with these values:

  • Name/Host: _dmarc (some providers want just _dmarc, others want the full _dmarc.yourdomain.com. Check your provider's format.)
  • Type: TXT
  • Value: your DMARC policy string, e.g. v=DMARC1; p=none; rua=mailto:reports@yourdomain.com

If you don't have a DMARC record yet and need to build one, our DMARC generator walks you through each option. Starting with p=none (monitoring mode) is the safest place to begin if you're not sure your authentication is clean yet.

How to verify it published correctly

Give DNS 15 to 60 minutes to propagate after saving. Then paste your domain into our DMARC parser to confirm the record is live and parses correctly.

If the parser can't find it, the most common mistake is publishing at dmarc.yourdomain.com instead of _dmarc.yourdomain.com (missing the underscore). The SOS hotline is free if you're still stuck after double-checking.

Contributors

Who worked on this answer

Every name links to their profile. Every company links to their site. Real people, real accountability.

Ask an AI · tailored to your setup

Help Me Publish My DMARC Record

I just read the Email Almanac entry on publishing a DMARC record. Help me publish mine correctly and verify it's in the right place. Walk me through: 1. Confirming the exact format my DNS provider expects for the subdomain (_dmarc vs _dmarc.yourdomain.com) 2. What to put in the policy string for my current situation (monitoring vs enforcement) 3. How to verify the record is live and parses correctly after publishing 4. What to do if the DMARC parser can't find my record --- My details (fill in what applies): - Sending domain: your domain - DNS provider: [Cloudflare / Route 53 / GoDaddy / Namecheap / Google Domains / other] - SPF status: passing / failing / unsure - DKIM status: passing / failing / unsure - Desired DMARC policy: p=none to start / p=quarantine / p=reject / unsure - Reporting email for rua= tag: where you want DMARC reports sent

Edit the yellow boxes, then send to the AI of your choice.