DNS provider
Add a DMARC record in Google Cloud DNS
DMARC lives at _dmarc.yourdomain as a TXT record. Google Cloud DNS is your control plane — one typo in the name field and receivers never see the record.
Provider gotcha: The DNS name field for apex records must use a trailing dot:
example.com. — FQDN form. Omitting the dot can create the wrong relative name.See also DMARC record reference and DMARC setup guide.
Step by step
Step 1 Google Cloud Console → Network services → Cloud DNS → your zone → Add standard (or Add record set).
Step 2 Choose TXT. In the name/host field enter
_dmarc only (Use FQDN with trailing dot for clarity on apex; for _dmarc use _dmarc.example.com. in the name field.).Step 3 Paste this value in one piece (follow your provider’s quoting rules):
v=DMARC1; p=none; rua=mailto:dmarc@example.com; fo=1
Step 4 TTL: 1 hour is fine for rollout. Save. Remember: The DNS name field for apex records must use a trailing dot:
example.com. — FQDN form. Omitting the dot can create the wrong relative name.Step 5 Query
_dmarc.yourdomain with dig or use DNS Propagation across resolvers.Step 6 Run DNS Preflight on the domain — DMARC policy and reporting should appear once TXT resolves.
DNS Preflight — full auth check for your domain.
Propagation — compare resolvers.
FAQ
Where do I add DMARC in Google Cloud DNS?
In the DNS zone for your domain — TXT name _dmarc, value starting with v=DMARC1.
Why is my DMARC not visible yet?
TTL on the old record, or wrong name (full FQDN vs relative). Check authoritative NS.
Does Google Cloud DNS proxy DMARC TXT?
Treat mail-related DNS as DNS-only where applicable — follow the provider gotcha on this page.
What p= should I start with?
p=none for monitoring — tighten after reports look clean.
How do I verify?
DNS Preflight and the DMARC Report Analyzer after rua= receives XML.