Flash Sale:75% Off Hosting + Free DomainEnds in13h47m14sView Plans
Hostvento logoHostvento
Get Started

How to Set Up a DMARC Record in cPanel

This guide shows you how to add a DMARC record to your domain in cPanel. It helps stop others from sending fake emails in your name.

Domains and DNS2 min read10 steps

What is DMARC?

DMARC tells email receivers what to do with messages that pretend to be from your domain. Think of it as a note to the post office: "If a letter claims to be from me but fails the checks, here is what to do with it."

DMARC works with two other records. SPF lists the servers allowed to send your mail. DKIM adds a secret signature to your mail. Set these up first. DMARC checks the results of both.

Check SPF and DKIM first

  1. Log in to cPanel. cPanel is a web page for managing your hosting. Your login is in your welcome email.
  2. In the Email section, click Email Deliverability.
  3. Find your domain. It should say that SPF and DKIM are valid. If not, click Repair or Manage and fix them.

Add the DMARC record

A DMARC record is a TXT record. A TXT record is a line of text saved in your DNS. DNS is like a phone book for the internet.

  1. In cPanel, open Zone Editor in the Domains section.
  2. Click Manage next to your domain.
  3. Click Add Record. Choose Add TXT Record if it asks.
  4. In the Name box, type _dmarc.yourdomain.com. using your own domain. Keep the dot at the end if cPanel shows one.
  5. Set the type to TXT.
  6. In the Record box, paste this value.
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com

This means: start in watch-only mode, and send reports to the address given. Use a real mailbox you can read.

  1. Click Add Record.

What do the parts mean?

PartMeaning
v=DMARC1The version. Always this.
p=noneDo nothing, only report
p=quarantineSend failing mail to spam
p=rejectBlock failing mail
rua=Where to send summary reports
Warning: Start with p=none. Read the reports for a few weeks. If a real service of yours fails the checks, fix it first. Only then move to quarantine or reject. Going strict too soon can block your own legitimate mail.

Check it

nslookup -type=txt _dmarc.yourdomain.com

This shows the record you added. DNS changes can take a few hours to appear.

Need help? Open a support ticket.

Quick recap

  • DMARC tells receivers how to treat fake mail from your domain.
  • Set up SPF and DKIM first.
  • Add a TXT record named _dmarc in Zone Editor.
  • Start with p=none and read the reports.
  • Tighten the policy later.