Before you begin

  • Confirm the exact domain shown in the visible From address of your mail.
  • Identify every legitimate platform that sends using that domain.
  • Make sure SPF and DKIM are already configured where possible.
  • Locate the existing TXT record at _dmarc.your-domain.

Add the domain

Sign in, choose Add domain and enter the bare domain name. The dashboard creates a unique RUA recipient and displays the required reporting and authorisation records.

Note

Only add domains you own or are explicitly authorised to administer.

Update one DMARC record

Edit the existing DMARC TXT value rather than creating a second record. Add the unique RUA URI shown in your account.

  • Keep v=DMARC1 first.
  • Do not remove an existing policy or alignment setting.
  • Separate multiple rua URIs with commas.
  • Publish only one DMARC policy record for a name.
v=DMARC1; p=none; rua=mailto:your-id@rua.dmarcanalyst.com

Publish external authorisation

The dashboard shows the exact TXT name and value required to authorise an external destination. This prevents someone else from directing unwanted reports at the receiver.

your-domain.example._report._dmarc.rua.dmarcanalyst.com  TXT  "v=DMARC1;"

Verify and wait for reports

DNS changes may appear quickly but caches can retain old values until their TTL expires. Aggregate reporters usually work on daily periods, so the first useful data often takes 24–48 hours after a valid setup.

  • Use Verify setup in the dashboard.
  • Send ordinary mail as usual; no special test message is required.
  • Do not move to enforcement until all legitimate sources have been reviewed.