DMARC record for Namecheap

Does this page apply to you?

Run this first. Namecheap only matters if it is where your DNS or mail actually lives.

dig +short NS yourdomain.com

Expect: Names ending in registrar-servers.com (BasicDNS or PremiumDNS). If you see something else, such as Cloudflare, the Advanced DNS panel at Namecheap is inert.

Specific to Namecheap

• Host _dmarc, with a value that starts v=DMARC1.
• If DNS is at Namecheap but your mail is at Google or Microsoft, the DMARC record still belongs here. The mail provider does not publish it for you.

What you should end up with

Illustrative values. Use the exact host and value your provider shows you where it generates them.

Type  Name  Value
TXT  _dmarc  v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com

What the receiving server does with this record

When a message arrives, the receiver looks up _dmarc. plus the From domain. DMARC passes when SPF or DKIM passes and the domain that passed matches the From domain. If it fails, the p= policy decides what happens: none does nothing, quarantine sends it to spam, reject refuses it. Either way the receiver can email you an aggregate report.

Mistakes that break it

• Jumping to `reject`. Start at p=none, read the reports, fix every legitimate sender, then tighten. Enforcing before that loses real mail.
• Two DMARC records. Like SPF, a domain should have only one.
• Reports into your inbox. Aggregate reports arrive daily as zipped XML from every provider that saw your mail. Use a dedicated address or a report parser.
• A `rua` address on another domain. Reports to an external domain are only sent if that domain publishes a record authorizing it.

Gmail and Yahoo have required DMARC from bulk senders since 2024, at a minimum p=none. Build the record with the DMARC generator.

Check it from the command line

dig +short TXT _dmarc.yourdomain.com