Add a DMARC record to my domain for Microsoft 365

Domain-based Message Authentication, Reporting and Conformance (DMARC) helps protect your email address from being misused by third parties. It works by verifying your IP address against the owner of your domain, ensuring that an email you send is actually from you.

Define how suspicious email is handled by DMARC

The value of the DMARC TXT record includes a “p=” parameter. The p stands for “policy.” When an email appears to be from your domain but doesn’t contain the correct information, you can use 1 of 3 policies to define how that email gets handled:

1. p=none: The receiving email server performs no action against unauthenticated email but instead sends a report to an email listed in the mailto: address on the DMARC record.
2. p=reject: The receiving email server denies and blocks unauthenticated email.
3. (Recommended) p=quarantine: The receiving email server quarantines unauthenticated email (for example, sending them to a junk or spam folder instead of an inbox). This is the policy we use in the steps below.

Add a DMARC TXT record to your domain

These instructions are only for domains with DNS managed at GoDaddy. If your domain is not with GoDaddy, you'll need to update your records with your DNS provider.

1. If you haven't already, add SPF and enable DKIM for your domain.
2. Sign in to your GoDaddy Domain Portfolio. (Need help logging in? Find your username or password.)
3. Under Domain Name, select your domain.
4. Under your domain name, select DNS.
5. Select Add New Record, and then enter the following details:
   • Type: Select TXT.
   • Name: _dmarc
   • Value: v=DMARC1; p=quarantine; pct=100; rua=mailto:jane@coolexample.com; ruf=mailto:jane@coolexample.com
     Required: Replace jane@coolexample.com with the email address where you would like to receive notices about DMARC. We recommend using an email address that belongs to the administrator or owner of your domain.
   • TTL: Leave it as Default.
6. Select Save.

Most DNS changes take effect within an hour but could take up to 48 hours to update globally.

Related steps

• Edit a TXT record
• Enable and add DKIM to my domain for Microsoft 365
• Add an SPF record to my domain for Microsoft 365

More info

• Find out more about how DMARC works from DMARC.org.