What is a DMARC record? Examples and setup
A DMARC record is a DNS TXT record, published at _dmarc.yourdomain.com, that tells receiving mail servers what to do when a message claiming to be from your domain fails SPF and DKIM alignment — and where to send reports. It is the policy layer that turns SPF and DKIM into real anti-spoofing protection. A minimal record is: v=DMARC1; p=reject; rua=mailto:dmarc@yourdomain.com.
Check your domain now with the free DMARC checker — see your SPF, DKIM and DMARC status in seconds.
Where the record lives
Unlike SPF, which sits on your root domain, the DMARC record is published as a TXT record on the subdomain _dmarc.yourdomain.com. There must be exactly one DMARC record, and it must begin with "v=DMARC1".
The key tags explained
p sets the policy (none, quarantine, or reject). rua is the address for aggregate reports. sp sets a separate policy for subdomains. pct ramps enforcement to a percentage of mail. aspf and adkim control strict or relaxed alignment. For most domains, p and rua are all you need to start.
How to set it up correctly
Publish "v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com" first to gather reports, confirm your legitimate senders align, then tighten to p=quarantine and p=reject. Run the free DMARC checker to confirm the record is valid and enforcing, and let VeruMail monitor it so any future drift is caught automatically.
Frequently asked questions
Where do I put my DMARC record?
As a TXT record on the subdomain _dmarc.yourdomain.com — not on the root domain. It must start with v=DMARC1.
What is the best DMARC policy?
p=reject provides the strongest protection. Reach it gradually: start at p=none to monitor, move to p=quarantine, then p=reject once all legitimate mail passes.
Fix this for your domain — free
Create a free account for the exact DNS records and 24/7 monitoring of your first domain, free forever.
Start free