DMARCBreaks authentication
No DMARC record found: how to add one
Your domain has no DMARC record. Add one at _dmarc with p=none to start receiving reports, then tighten it.
What it means
DMARC ties SPF and DKIM to the domain people see in the From address and tells receivers what to do when both fail: nothing (p=none), spam folder (p=quarantine) or reject (p=reject).
It's a TXT record at _dmarc.yourdomain. Without it, receivers apply their own judgement, and you get no reports on who sends as you.
Why it matters for cold email
Since 2024, Gmail and Yahoo require a DMARC record from anyone sending 5,000 or more messages a day to them; p=none is enough. Cold email domains without one look unfinished, and the reports are how you spot a tool sending with broken authentication.
How to fix it
- Pick an address to receive reports (a dedicated mailbox or a DMARC report service).
- Add a TXT record with host _dmarc and the value below, using your address. Our DMARC generator builds it.
- Leave it at p=none for a few weeks and read the reports.
- When only your own services appear, move to p=quarantine, then p=reject.
A starting record (host: _dmarc)
Record
v=DMARC1; p=none; rua=mailto:[email protected]
Questions
Will p=none hurt my delivery?
No. It changes nothing about how your mail is handled; it only asks for reports and meets the Gmail and Yahoo requirement.
Do I need SPF and DKIM first?
Yes. DMARC passes only when SPF or DKIM passes for your domain. Set those up, then add DMARC.
Related problems
- DMARC p=none: when and how to move to quarantine or reject
- DMARC without rua: add an address to receive reports
- DKIM record not found: turn on signing and publish the key
Last checked 2026-10-21 against RFC 7208 (SPF), RFC 6376 (DKIM) and RFC 7489 (DMARC). Full setup guide
Sending cold email? Outsquid re-checks these records for every sending domain every hour, so a broken one doesn't go unnoticed. How deliverability works