EmailNa

Home › For senders

"No DMARC record found" or "DMARC policy not enabled": how to fix it

Two of the most common warnings from DMARC checkers. Both are fixable in a few minutes at your domain's DNS settings, and neither means your email is broken today.

By David Ray · Updated November 3, 2026 · 3 min read · How we research

Quick answer

"No DMARC record found" means your domain has no DMARC TXT record at _dmarc.yourdomain.com. "DMARC policy not enabled" usually means you have a record, but its policy is p=none, so it only monitors. To fix the first, add a TXT record named _dmarc with the value v=DMARC1; p=none; rua=mailto:you@yourdomain.com. To fix the second, move to p=quarantine and later p=reject once every service that sends as your domain passes SPF or DKIM.

New to these records? See SPF, DKIM and DMARC explained.

What the two warnings mean

WarningWhat the checker foundFix
No DMARC record foundNothing at _dmarc.yourdomain.comPublish a DMARC record
DMARC policy not enabledA record with p=none (monitor only)Move to p=quarantine or p=reject

DMARC tells receiving mail servers what to do with email that claims to be from your domain but fails authentication. With p=none, they deliver it anyway and just send you reports. That is why many checkers say the policy is "not enabled".

Why it matters

How to add a DMARC record

  1. Log in where your domain's DNS is managed: your registrar (such as GoDaddy or Namecheap), Cloudflare, or your web host.
  2. Add a new TXT record.
  3. In the host or name field, enter _dmarc. Most providers add your domain automatically; if yours shows the full name, it should read _dmarc.yourdomain.com.
  4. In the value field, enter:
    v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com
    Use any mailbox you check for the rua address.
  5. Save. Most DNS changes appear within an hour, sometimes up to a day.
  6. Test it with the free DMARC checker, or build a record step by step with the DMARC record generator.

Fixing "DMARC policy not enabled"

Don't jump straight to the strictest setting. If a service that sends real mail for you (your newsletter tool, invoicing app or help desk) isn't set up with SPF or DKIM, a strict policy will send its mail to spam or block it.

  1. Watch first. Keep p=none for two to four weeks and read the reports sent to your rua address.
  2. Fix every real sender. Make sure each one passes SPF or DKIM with your domain. See why DKIM fails.
  3. Quarantine. Change to p=quarantine. Failing mail goes to spam instead of the inbox.
  4. Reject. Once reports look clean, change to p=reject. Failing mail is refused outright.

What does p=reject mean? It is the strongest DMARC policy: receiving servers refuse any message that claims to be from your domain but fails both SPF and DKIM alignment. It gives the best protection against people faking your domain.

Common mistakes

Domains that never send email

Parked domains and domains you only use for a website can still be spoofed. Protect them with a DMARC record of v=DMARC1; p=reject and an SPF record of v=spf1 -all, which together say "no mail ever comes from this domain".

Questions people ask

Is a DMARC record required?
Not by law, but Gmail and Yahoo require one from anyone sending 5,000 or more emails a day to their users, and many other providers trust mail more when it is present. Every domain that sends email should have one.
How long does a new DMARC record take to work?
Usually within an hour, and occasionally up to 24 to 48 hours, depending on your DNS provider and caching.
Will adding DMARC with p=none affect my email?
No. A p=none policy only asks for reports. Mail is delivered exactly as before.
Which type of DNS record identifies an email server?
The MX record. It lists the servers that receive email for a domain. DMARC, SPF and DKIM are TXT records that help receivers check whether mail is genuine.
What is the difference between p=quarantine and p=reject?
Quarantine sends failing mail to spam. Reject refuses it entirely, so it never reaches the recipient.
Sources checked

Keep reading