Cloudflare DMARC Setup
Domain-based Message Authentication - Step-by-step configuration guide
Prerequisites
- • SPF and DKIM already configured
- • Email address ready to receive reports
Configuration Steps
1
Go to DNS Management
Cloudflare → Select domain → DNS → Records
2
Add DMARC Record
Add record → Type: TXT → Name: _dmarc → Content: DMARC policy value
3
Choose Policy Level
Recommended gradual deployment: Start with p=none (monitor) → After confirmation, change to p=quarantine → Finally upgrade to p=reject
rua is the email for aggregate reports, recommended to configure for monitoring
4
Save
Save the record. DMARC usually takes effect within minutes.
Example Configuration
Example DMARC Value
v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@yourdomain.com; pct=100⚠️ This is an example value. Modify it according to your email service provider's requirements.
Verify Your Configuration
Terminal Command
$ dig TXT _dmarc.yourdomain.com +shortReplace "yourdomain.com" with your actual domain name
Common Mistakes to Avoid
- ✗Name written as _dmarc.yourdomain.com (should just be _dmarc)
- ✗Starting with p=reject causing legitimate emails to be rejected
- ✗No rua email configured, unable to receive reports
Other Cloudflare Guides
DMARC Guides for Other Providers
Verify Your DMARC Configuration
After setting up your DMARC record, use our free checker to verify it's correctly configured.
Check Your Domain Now