Sign inMonitor a domain

Write a DMARC record that won’t break your own mail.

Start at p=none with a report address: nothing about delivery changes, and the reports show you every service that sends as you. Then use the same page to step up to quarantine and reject.

Policy (p)
Monitoring only: receivers apply no special handling to mail that fails, but send you reports if rua is set.
Subdomains that exist (sp)
Subdomains that don’t exist (np, RFC 9989)
Spoofers often invent subdomains; np=reject stops that even while p is still none.
Advanced: alignment and failure reports
Your record
v=DMARC1; p=none

RFC 9989 syntax. Defaults (adkim=r, aspf=r, no testing) are left out to keep it short; the legacy pct= tag is never written.

Fix 1 of 1 · about 3 minutes

Publish this DMARC record

It goes at _dmarc on your domain. Replace any existing DMARC record: a name must have exactly one.

Your DNS host: choose it below
TypeTXT
Name / Host_dmarc
Value / Content / Datav=DMARC1; p=none
TTLYour host’s default (1 hour is typical)
  1. Sign in where your domain’s nameservers point (your DNS host is often, but not always, your registrar).
  2. Open the DNS records or zone editor.
  3. Add a new TXT record. Enter _dmarc as the name; if the host doesn’t add your domain automatically, enter _dmarc.yourdomain.com.
  4. Paste the value exactly, with no surrounding quotes unless the form asks for them, and save.
  5. Most hosts publish within minutes; resolvers that already cached the old answer keep it until its TTL runs out. Then press Re-check.

Steps checked against RFC 1035 §3.3.14 (TXT records) on 5 Oct 2026.

Sources

  1. RFC 9989 §4.7: DMARC policy record format · checked 5 Oct 2026
  2. RFC 9990 §4: verifying external report destinations · checked 5 Oct 2026
  3. Google Workspace: Set up DMARC · checked 5 Oct 2026

Related tools

Domain Health Report Everything at once, graded, with the fixSPF checker Include tree and the 10-lookup limitDMARC checker RFC 9989 tree walk and policyDKIM checker Common selectors or yoursMTA-STS and TLS-RPT Policy file and reportsDMARC report reader Parsed in your browserDNS lookup Any record, with TTLs explainedWHOIS / RDAP Registrar, expiry, status codes