How do I set up DMARC?

DMARC stands for Domain-based Message Authentication, Reporting and Conformance. It's used to detect and prevent spoofing of email. DMARC is always used in combination with SPF and DKIM records.

A DMARC record can be aplied with 2 methods. You can chose between generating a DMARC record or stating in the DMARC record that there's no DMARC in use, reason for this is that cPanel itself doesn't supports DMARC yet. DMARC isn't widely used at the moment, the lack of a DMARC record there for isn't a huge problem.

In this article we explain both above mentioned methods to set up a DMARC record. We recommend to set up SPF and DKIM records first if you don't have those yet.

N.B: SPF records - What is it and how to use them?

Generating a DMARC record

Because cPanel doesn't support DMARC yet you won't be able to find a DMARC record under the authentication function. It is however possible to set up a DMARC record in our DNS by using the outcome of this DMARC generator:

https://elasticemail.com/dmarc/

This generator guides you in generating the DMARC record by following several customizable steps.  By doing this it's possible to control if you only want use DMARC to monitor spoofed emails or if you also want emails to be send into the spam folder or to be rejected. It's also possible to receive reports by email and change how strict the DMARC will be.

The generated record can be placed into the DNS of your domain.

N.B: How do I manage my DNS records?

Use DMARC to state there's no DMARC in use

A different way to use DMARC is by explictly stating that there's no DMARC in use by using the record below, you only need to change yourdomainhere.tld with your domainname. This won't affect the delivery of emails.

_dmarc.yourdomainhere.tld TXT v=DMARC1; p=none;

N.B: How do I manage my DNS records?

This knowledgebase article was last updated on: 25 October 2018