Keep only one DMARC record

Why it matters

When a domain publishes more than one DMARC record, receivers discard all of them, so no DMARC policy applies at all. Duplicates usually come from adding a new record without removing an old one.

Staged change. Do this in stages and check each one before the next, so a mistake does not break your site or your mail.

The fix

1. List every TXT record at _dmarc for the domain that starts with v=DMARC1.
2. Decide which one to keep. If you are unsure which is current, keep the one with the weaker policy (p=none) and move forward from there, because discarded records mean you have effectively had no DMARC until now and a strict one could block mail that has never been checked.
3. Delete the others. Merge any useful rua addresses into the kept record, separated by commas.

_dmarc.example.com.  IN TXT  "v=DMARC1; p=none; rua=mailto:dmarc-reports@example.com"

The examples use example.com. Replace it with your own domain.

Read the documentation ↗(opens in a new tab)

Related

• Reported by the DMARC policy check
• Publish a DMARC record, starting in monitoring mode
• Fix the invalid DMARC record
• Move DMARC from monitoring to quarantine, then reject
• Move DMARC from quarantine to reject
• Remove the pct tag from the DMARC record
• Remove the t=y test flag from the DMARC record
• Make the DMARC subdomain policy match the main policy
• Add a report address to the DMARC record
• Remove or fix the invalid tags in the DMARC record