Can you have multiple DMARC records?

Here's a mistake that trips up more senders than you'd expect. You set up DMARC, then switch DNS providers during a migration. The old record stays. Now you have two DMARC records sitting at _dmarc.yourdomain.com, and suddenly receivers can't figure out which one to follow.

The short answer is no. You can't have multiple DMARC records. The DMARC specification allows exactly one TXT record at _dmarc.yourdomain.com. Publish two, and receiving mail servers hit a processing error. Some will grab whichever record they find first. Others will reject the lookup entirely and treat your domain as if DMARC doesn't exist at all. Neither outcome is what you want.

The most common ways duplicate DMARC records appear:

• Adding a new record instead of editing the existing one (the classic DNS mistake)
• Copy-paste errors that create a near-identical duplicate
• A DNS migration that leaves the old record behind

To check whether you have duplicates, run this in your terminal:

dig TXT _dmarc.yourdomain.com

You should see exactly one record starting with v=DMARC1. If you see two, delete one and keep the most complete version of your policy.

And when you do have a single record, here's what a solid DMARC record looks like:

v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@yourdomain.com; ruf=mailto:dmarc-forensic@yourdomain.com; pct=100; sp=quarantine

That record tells receivers to quarantine failing mail (p=quarantine), send aggregate reports to your reporting address (rua), apply the same policy to subdomains (sp=quarantine), and apply the policy to 100% of traffic (pct=100). You can check how any DMARC record parses with our free DMARC Parser, or generate a clean one from scratch with the DMARC Generator.

One policy per domain. That's the rule. If yours isn't working as expected, duplicates are worth checking first (before assuming anything else is broken).