DNS provider
Add a DMARC record in Azure DNS
DMARC lives at _dmarc.yourdomain as a TXT record. Azure DNS is your control plane — one typo in the name field and receivers never see the record.
Provider gotcha: For apex records the name field uses
@. TXT values go in the TXT Records box — one value per line if the UI splits long strings.See also DMARC record reference and DMARC setup guide.
Step by step
Step 1 Azure Portal → your DNS zone → + Record set.
Step 2 Choose TXT. In the name/host field enter
_dmarc only (SPF/DMARC/DKIM names are relative to the zone — e.g. _dmarc or google._domainkey for a selector.).Step 3 Paste this value in one piece (follow your provider’s quoting rules):
v=DMARC1; p=none; rua=mailto:dmarc@example.com; fo=1
Step 4 TTL: 1 hour is fine for rollout. Save. Remember: For apex records the name field uses
@. TXT values go in the TXT Records box — one value per line if the UI splits long strings.Step 5 Query
_dmarc.yourdomain with dig or use DNS Propagation across resolvers.Step 6 Run DNS Preflight on the domain — DMARC policy and reporting should appear once TXT resolves.
DNS Preflight — full auth check for your domain.
Propagation — compare resolvers.
FAQ
Where do I add DMARC in Azure DNS?
In the DNS zone for your domain — TXT name _dmarc, value starting with v=DMARC1.
Why is my DMARC not visible yet?
TTL on the old record, or wrong name (full FQDN vs relative). Check authoritative NS.
Does Azure DNS proxy DMARC TXT?
Treat mail-related DNS as DNS-only where applicable — follow the provider gotcha on this page.
What p= should I start with?
p=none for monitoring — tighten after reports look clean.
How do I verify?
DNS Preflight and the DMARC Report Analyzer after rua= receives XML.