Last updated: July 2026

In short: domainfactory has no wizard for DMARC. After this guide you create the _dmarc TXT record yourself in the nameserver settings — safely staggered up to p=reject.

Prerequisites

What is DMARC?

DMARC (Domain-based Message Authentication, Reporting & Conformance) combines SPF and DKIM into an enforceable policy and delivers you reports. Technically it’s a TXT record under _dmarc — and TXT entries at domainfactory are explicitly intended for services “for which no dedicated entry type is available”.

The starting point at domainfactory

As with DKIM, there’s no wizard for DMARC — unlike the SPF wizard. That’s no obstacle: you create the _dmarc TXT record yourself via the nameserver settings.

Step-by-step guide

1. Open the nameserver settings

In the customer menu, click Nameserver settings in the left column, then Edit for your domain.

2. Start with p=none

Create a new entry:

  • Hostname: _dmarc
  • Type: TXT
  • Value:
v=DMARC1; p=none; rua=mailto:dmarc@beispiel.de

p=none only observes. You best analyze the rua reports with a DMARC monitor like MARCo.

3. Stagger up to reject

When the reports show that all sources are clean:

v=DMARC1; p=quarantine; pct=25; rua=mailto:dmarc@beispiel.de
v=DMARC1; p=reject; rua=mailto:dmarc@beispiel.de

4. Wait until the change is live

DNS changes take time. Made a typo? Via “Reset nameserver entries” you can return to the original state (also removes other changes).

The most important tags

TagMeaning
p=policy: none / quarantine / reject
rua=address for aggregated reports
pct=portion of mail the policy applies to
sp=policy for subdomains
adkim= / aspf=alignment (r relaxed, s strict)

Verify the result

Check your configuration with the free MXAudit scanner — it shows you DMARC, SPF, and DKIM at a glance.

Common mistakes

Expected a wizard. There isn’t one for DMARC at domainfactory — create the record yourself.

Straight to reject. Without a none phase you block legitimate sources.

Wrong hostname. The record belongs at _dmarc.

DMARC without SPF/DKIM. First SPF and DKIM, then DMARC.

Further reading