Keep only one DMARC record on Cloudflare

Why it matters

When a domain publishes more than one DMARC record, receivers discard all of them, so no DMARC policy applies at all. Duplicates usually come from adding a new record without removing an old one.

Staged change. Do this in stages and check each one before the next, so a mistake does not break your site or your mail.

The fix

1. In the Cloudflare dashboard open DNS > Records and search for _dmarc. Delete all but one of the TXT records whose Content starts with v=DMARC1.
2. Edit the one you keep if needed so its rua holds the report addresses you want.

Type:     TXT
Name:     _dmarc.example.com
Content:  v=DMARC1; p=none; rua=mailto:dmarc-reports@example.com

The examples use example.com. Replace it with your own domain.

Read the documentation ↗(opens in a new tab)

Related

• Reported by the DMARC policy check
• Publish a DMARC record, starting in monitoring mode
• Fix the invalid DMARC record
• Move DMARC from monitoring to quarantine, then reject
• Move DMARC from quarantine to reject
• Remove the pct tag from the DMARC record
• Remove the t=y test flag from the DMARC record
• Make the DMARC subdomain policy match the main policy
• Add a report address to the DMARC record
• Remove or fix the invalid tags in the DMARC record