Guides

How to set up DMARC starting with p=none

DMARC tells receiving servers what to do with mail that fails SPF or DKIM, and sends you reports about who is sending as your domain. Always start in p=none mode, which only monitors and blocks nothing. That way you can see every source of your email before enforcing a strict policy.

1. Set up SPF and DKIM first

   DMARC builds on SPF and DKIM, so make sure both are already valid. Without them even legitimate mail will fail the check.

2. Open Zone Editor

   In cPanel, under Domains, open Zone Editor and select the domain whose DNS records you want to manage.

3. Add a _dmarc TXT record

   Click Add Record, choose type TXT, and in the name field enter _dmarc (the panel appends the domain) so it becomes _dmarc.yourdomain.com.

4. Enter the p=none policy

   Set the value to v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com. The rua address is where aggregate reports will be sent.

5. Collect reports for two to four weeks

   p=none blocks nothing. During this window read the reports and confirm all your legitimate senders pass SPF or DKIM.

6. Tighten the policy gradually

   Once legitimate mail passes consistently, change p=none to p=quarantine, then later to p=reject. Spoofing gets blocked while your own mail keeps flowing.

How to verify the result

Check the domain in the TechGuard email checker - it shows whether a DMARC record exists and what policy it uses.

Tip: Do not jump straight to p=reject; without a monitoring period you risk blocking your own email.

Related guides

• How to set up an SPF record in cPanel
• How to add a DKIM signature for your domain
• What to do when your emails land in spam
• How to add MX records for a new domain