How to add a DMARC record on Namecheap
DMARC tells receiving mail servers what to do when a message claiming to be from your domain fails SPF and DKIM checks — and sends you reports about who is sending as your domain. Without it, authentication results are advisory and you fly blind.
The record is a TXT record at the _dmarc subdomain of your domain. Start with p=none (monitoring only — nothing about delivery changes), read the reports, then tighten to p=quarantine and finally p=reject.
The record you'll add
TypeTXT
Host_dmarcEnter just _dmarc — Namecheap appends your domain automatically.
Valuev=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.comPoint rua at a mailbox you actually read (an address on your own domain works without extra setup). If you send reports to a different domain, that domain's owner must publish an authorization record — most DMARC report services handle this for you.
TTLThe default "Automatic" TTL (30 minutes) is fine; changes are typically live within 30 minutes.
Steps on Namecheap
- Sign in at namecheap.com and open Domain List → Manage next to your domain.
- Open the Advanced DNS tab.
- Under Host Records, click Add New Record and choose the record type.
- Enter @ (root) or the prefix shown above as the Host — never include your domain name itself — paste the Value, and save.
Provider steps verified against Namecheap: Add TXT/SPF/DKIM/DMARC records on 2026-07-12.
Get the exact record for your domain
The free DMARC checker reads your domain's live DNS, flags what's wrong, and generates the precise DMARC record to publish — then rechecks to confirm the fix took.
Run the DMARC checker →Frequently asked questions
- What goes in the Host field on Namecheap?
- Enter just _dmarc — Namecheap appends your domain automatically, so don't type the full _dmarc.yourdomain.com.
- How long until the record is live?
- The default "Automatic" TTL (30 minutes) is fine; changes are typically live within 30 minutes. Receivers that cached your old DNS answers will pick the change up as the previous TTL expires.
- Which DMARC policy should I start with?
- p=none. It changes nothing about mail delivery but turns on aggregate reporting, so you can see every source sending as your domain. Move to p=quarantine once the reports show all your legitimate senders passing, and to p=reject when quarantine has run clean for a few weeks.