Cloudflare
Adding a DMARC Record in Cloudflare DNS
DMARC records in Cloudflare go at _dmarc as the Name. Start with p=none so you get reports without affecting delivery — then tighten the policy after reviewing the data.
Exact Cloudflare format
DNS → Records → Add record
Type: TXT
Name: _dmarc
Content: "v=DMARC1; p=none;
rua=mailto:dmarc@yourdomain.com"
TTL: Auto
Read aggregate reports
Open DMARC Report Analyzer →Step by step
Step 1 Cloudflare DNS → Add record → Type: TXT
Step 2 Name: _dmarc
Step 3 Content: paste your DMARC value starting with v=DMARC1
Step 4 Save
Step 5 Run DNS Preflight to confirm DMARC policy is live
Step 6 After 2-4 weeks of reports, upgrade from p=none to p=quarantine then p=reject
FAQ
What Name do I use for DMARC in Cloudflare?
_dmarc — not _dmarc.yourdomain.com. Cloudflare adds your domain automatically.
Should I start with p=none or p=reject?
Always start with p=none. It monitors without affecting delivery. Only move to p=reject after reviewing reports.
Where do DMARC reports go?
To the email in your rua= tag. Use DomainPreflight DMARC Report Analyzer to read them.
Can I have both SPF and DMARC TXT records in Cloudflare?
Yes — they're at different Names. SPF is at @, DMARC is at _dmarc. No conflict.
How do I upgrade from p=none to p=reject?
Edit the existing _dmarc record — change p=none to p=quarantine, save, monitor for a week, then change to p=reject.