How to set up a DMARC record in the DNS zone of your cPanel account?

DMARC (Domain-based Message Authentication, Reporting and Conformance) is an email authentication protocol designed to detect and prevent your domain from being spoofed to send emails. An email compliant with DMARC is less likely to be considered spam, which positively impacts the deliverability of your emails. In this article, we will show you how to set up a DMARC record on cPanel. Given that the DMARC protocol is used by many email providers (such as Gmail, Yahoo!, AOL, Hotmail, Outlook), it increases your chances of emails being successfully delivered.

Set Up a DMARC Record

To implement the DMARC protocol for your domain, you will need to add a new TXT entry in the DNS zone. Log in to your cPanel In the section Domains, click Zone Editor

On the line of the domain name you want to configure, click on Manage

On the next page, click the Add Record

button Enter the name, TTL, type, and record as described below. Remember that you must select one of the following options for the Record field: None, Reject, or Quarantine. Name: _dmarc TTL: 14400 Type: TXT Record: (Choose how recipient servers handle messages that fail DMARC because neither aligned SPF nor aligned DKIM authentication passes.)

• None: v=DMARC1; p=none; sp=none; rf=afrf; pct=100; ri=86400

• Reject: v=DMARC1; p=reject; sp=none; rf=afrf; pct=100; ri=86400

• Quarantine: v=DMARC1; p=quarantine; sp=none; rf=afrf; pct=100; ri=86400

Once you enter the record, click on Save Record to save

Edit a DMARC Record

If you already have a DMARC record added and you want to modify it, please follow these steps: On the DMARC record line, click on Edit

Edit the settings and click on Save Record

If you wish to modify additional settings, please consult this link: https://dmarc.org/overview/ Congratulations, you now know how to set up a DMARC record in your cPanel for email validation.

Check the result and troubleshoot

Start by observing results with a policy appropriate to your situation. Check alignment with the domain visible in From. Do not immediately reject messages from sending sources you have not inventoried; legitimate mail could be blocked.