DMARC records Print

A DMARC record is used by a recipient mail server to determine what happens if an incoming email fails authentication. It can either allow a message, quarantine it, or reject it, and it will send reports of these actions to the email address you specify. If you do not publish a DMARC, the recipient server will determine how to handle a failed authentication.

 

cPanel now provides automated DMARC creation! You can install a DMARC record without needing to format it yourself when logged in to cPanel following these quick steps:

 

1. Click "Email Deliverability"
2. Click "Manage" next to the domain you wish to manage
3. Scroll down to the "DMARC" heading
4. Click "Install The Suggested Record"

That's it - you're done!

 

If you are using another DNS service such as your registrar or Cloudflare, you'll need to create a DMARC record manually and save it to the DNS zone. Read on to learn how the record is formatted:

Here is an example of a simple DMARC record in the correct format:

v=DMARC1; p=none; rua=mailto:dmarc@domain.com

This record is showing that it is using DMARC version 1, with no specific policy set, and the report address of dmarc@domain.com.

You can choose one of three policies with the "p=" tag: quarantine, reject, and none. Setting the quarantine policy will set aside suspicious emails to be processed further and will generally result in the suspicious mail being delivered to spam. Setting the reject policy will tell the recipient server to completely reject any messages which fail DMARC authentication. The none policy does not alter the recipient server's action regarding email which fails authentication - the recipient server's policy will determine its actions.

There are more flags than shown in this simple DMARC example, however for the vast majority of customers using the example with the report address of your choice will be sufficient to meet the DMARC verification standard many mail providers are beginning to require.

Once you have decided on your DMARC policy and address to receive the reports and ensured that that email address has been created, you can follow these quick steps to add your DMARC record.

 

1. Log in to cPanel
2. Find the "Domains" heading and select "Zone Editor"
3. Click "Manage" next to the domain you will be adding the DMARC to
4. Click "+ Add Record"
5. Under "Type", click the drop-down arrow and select "TXT"
6. In the "Name" field, enter _dmarc (cPanel will autofill the rest of the name when you select the next field)
7. In the "Record" field, enter your DMARC record with the policy and report address of your choice
8. Click "Save Record"

That's it - you're done!