Skip to main content

Security fix guide

How to Fix a Missing DMARC Record

A missing DMARC record means receiving mail servers have less guidance for handling spoofed email using your domain.

Run Full Website Security Scan

What the issue means

A missing DMARC record means receiving mail servers have less guidance for handling spoofed email using your domain.

Why it matters

DMARC helps protect your brand and users from phishing and domain spoofing when SPF and DKIM alignment are configured.

How to check it

Query TXT records for _dmarc.example.com.

How to fix it

Start with p=none for monitoring, then move to quarantine or reject after reviewing reports.

Configuration examples

Nginx
DNS record, not an Nginx setting.
Apache
DNS record, not an Apache setting.
Cloudflare
Add a TXT record at _dmarc with a value such as v=DMARC1; p=none; rua=mailto:security@example.com.

Related fix guides