How to Add a DMARC Record in Gandi

Gandi has been a registrar of choice for developers and small businesses for decades. If your domain lives there, adding a DMARC record takes only a few minutes through the DNS Records editor. This guide walks through every step.

Why You Need DMARC

A DMARC record tells receiving mail servers what to do with email that claims to be from your domain but fails SPF or DKIM authentication. Without one, attackers can impersonate your domain in phishing mail. With one, you block those messages and receive aggregate reports listing every service sending mail as you.

Use the free DMARC checker further down this page to confirm whether your domain already has a record before adding a new one.

Prerequisites

• A Gandi account with access to the domain
• LiveDNS enabled for the domain (Gandi's default)
• SPF and DKIM already configured (recommended)
• A mailbox to receive aggregate reports

dmarccreator.com can generate a valid DMARC record from a short form if you need help.

Step 1: Open the DNS Records Editor

1. Log in to your Gandi account
2. Click Domain in the sidebar
3. Click your domain name
4. Click the DNS Records tab

You will see the current DNS records.

Step 2: Add the DMARC TXT Record

1. Click Add above the records list
2. Fill in the fields

Important notes:

• Enter only _dmarc in the Name field; Gandi appends your domain
• Gandi expects TXT values wrapped in double quotes
• Use a real mailbox in the rua tag

Click Create

Click Create to publish the record.

Step 3: Verify the Record

Example DMARC Records

Monitoring Only (Start Here)

v=DMARC1; p=none; rua=mailto:[email protected]

Quarantine Policy

v=DMARC1; p=quarantine; rua=mailto:[email protected]

Reject Policy

v=DMARC1; p=reject; rua=mailto:[email protected]

Editing an Existing Record

1. Find the _dmarc TXT row in the records list
2. Click the pencil icon
3. Update the value (keep the quotes)
4. Click Update

Common Mistakes

Forgetting the Quotes

Gandi LiveDNS does not auto-wrap values. Quotes are mandatory or the record may not parse.

Editing the Zone File Directly Without Quotes

Gandi also offers a raw zone-file editor. The same quoting rules apply there.

Multiple DMARC Records

DMARC requires exactly one record per domain. Delete duplicates before saving a new one.

LiveDNS Not Active

Some legacy Gandi domains still use the classic DNS system. Confirm LiveDNS is active for the domain in the Nameservers tab.

What To Do After Publishing

p=none only observes. To actually block spoofing:

1. Collect reports for 2-4 weeks
2. Fix any senders failing SPF or DKIM alignment
3. Move to p=quarantine
4. Advance to p=reject

The complete DMARC guide walks through the full rollout step by step.

Complete Checklist

• [ ] Opened Gandi DNS Records
• [ ] Added a TXT record named _dmarc
• [ ] Wrapped the value in double quotes
• [ ] Used a valid mailto: rua address
• [ ] Saved and verified with the DMARC checker

Monitor Your DMARC Records

Checking once is good. Monitoring continuously is better. The Email Deliverability Suite watches your SPF, DKIM, DMARC, and MX records daily and alerts you when something breaks.