Email records · Namecheap · Microsoft 365

How do I add a DMARC record at Namecheap for Microsoft 365?

Add one TXT record named _dmarc in your Namecheap DNS records, start it at p=none, then raise it to p=quarantine and p=reject.

Last read from the sources at the foot of this page.

Namecheap · DNS record
Type
TXT
Name
_dmarc
Value
v=DMARC1; p=none; rua=mailto:[email protected]
The first stage. Use your own domain and a mailbox someone reads.
01

What does a DMARC record do?

It tells mail servers what to do with a message that uses your domain but did not come from a service you approved. It also asks them to send you reports on who sends mail in your name.

02

What record do I publish for Microsoft 365?

A TXT record named _dmarc. Start with the first value below. Replace yourfirm.example with your own domain, and use a mailbox someone reads for the reports.

  1. Start herep=nonereports only
  2. p=quarantinesuspicious mail to spam
  3. Where to aimp=rejectforged mail refused
Start: reports only
v=DMARC1; p=none; rua=mailto:[email protected]
Then: suspicious mail to spam
v=DMARC1; p=quarantine; rua=mailto:[email protected]
Then: forged mail refused
v=DMARC1; p=reject; rua=mailto:[email protected]
03

How do I add it at Namecheap?

  1. Sign in to Namecheap and open Domain List.
  2. Click Manage beside your domain and open the Advanced DNS tab.
  3. Click Add New Record and choose TXT Record.
  4. Type _dmarc in Host.Leave your domain name out: it is added for you.
  5. Paste the record in Value, exactly as copied.
  6. Click Save all changes.

In our words, from Namecheap: adding a TXT record, read 14 October 2026. If a screen has changed since, follow the host's own page.

04

When do I move past p=none?

When the reports show every service that sends mail for you passing. Before each step, check that your mail, invoicing, booking and newsletter services are in your SPF record or sign their mail with DKIM. A service that is missing will have its mail sent to spam, or refused.

Move to p=quarantine first. Microsoft suggests raising it in steps with pct=10, 25, 50, 75 and then 100. Then move to p=reject, which asks mail servers to refuse a message that fails.

This is our own judgement, not a quote. Where your domain has no DMARC record and one service is the only sender in your SPF record, our steps start at p=quarantine.

Sources

Where does this come from?

Related

See what is open before anyone else does.

We read your domain from outside and show each way in with a check anyone can re-run.