How to Add a DMARC Record in DigitalOcean DNS

If you host your DNS in DigitalOcean, adding a DMARC record takes only a few minutes. This guide walks through adding a DMARC TXT record using the Networking panel so you can start protecting your domain from spoofing.

Why You Need DMARC

Without a DMARC record, attackers can impersonate your domain in phishing emails and you get no feedback about it. DMARC tells mail providers what to do with messages that fail authentication, and its aggregate reports show you exactly which services are sending mail as you.

Not sure if a record already exists? Use the free DMARC record checker below to confirm before you start.

Prerequisites

• A domain pointed to DigitalOcean nameservers (ns1.digitalocean.com, etc.)
• Access to your DigitalOcean account
• SPF and DKIM already configured (recommended)

If you need help generating the record itself, dmarccreator.com will build one for you.

Step 1: Open the Networking Panel

1. Log in to the DigitalOcean control panel
2. Click Networking in the left sidebar
3. Select the Domains tab
4. Click your domain name

You will see the list of current DNS records.

Step 2: Add the DMARC TXT Record

1. Click the TXT tab above the new-record form
2. Fill in the fields

Important notes:

• Enter only _dmarc in the hostname; DigitalOcean appends your domain
• No quotes are needed around the value
• Use a real mailbox in the rua= tag so you can read the reports

Click Create Record

Click Create Record to save.

Step 3: Verify the Record

Example DMARC Records

Monitoring Only (Start Here)

v=DMARC1; p=none; rua=mailto:[email protected]

Quarantine Policy

v=DMARC1; p=quarantine; rua=mailto:[email protected]

Reject Policy

v=DMARC1; p=reject; rua=mailto:[email protected]

Editing an Existing Record

1. In the domain's record list, find the _dmarc TXT row
2. Click the More menu on the right
3. Choose Edit
4. Update the value and click Save

Common Mistakes

Typing the Full Hostname

If you enter _dmarc.yourdomain.com, DigitalOcean creates _dmarc.yourdomain.com.yourdomain.com. Enter only _dmarc.

Adding Quotes

DigitalOcean does not need surrounding double quotes. Paste the value plain.

Multiple DMARC Records

Only one DMARC record is allowed per domain. Delete duplicates or DMARC will be silently ignored.

Domain Not Using DigitalOcean Nameservers

If your registrar still points elsewhere, the DigitalOcean record has no effect. Confirm the nameservers at your registrar before troubleshooting further.

What To Do After Publishing

A DMARC record with p=none is a starting point, not the finish line. You should:

1. Collect aggregate reports for 2-4 weeks
2. Fix any legitimate senders failing SPF or DKIM alignment
3. Move to p=quarantine once your legitimate mail is clean
4. Advance to p=reject for full protection

See our complete DMARC guide and the DMARC enforcement guide for the full rollout playbook.

Complete Checklist

• [ ] Opened Networking and selected your domain
• [ ] Added a TXT record with hostname _dmarc
• [ ] Included a valid rua= mailbox
• [ ] Saved and verified with the DMARC checker
• [ ] Planned the move to enforcement

Monitor Your DMARC Records

Checking once is good. Monitoring continuously is better. The Email Deliverability Suite watches your SPF, DKIM, DMARC, and MX records daily and alerts you when something breaks.