Add DMARCdrift to your DMARC record
How to add the DMARCdrift rua= reporting address to your DMARC record while keeping any existing reporting destinations intact.
Your assigned DMARCdrift inbound address needs to be in the rua= tag of your domain's DMARC record. If you already have a DMARC record with an existing rua= address, you can add DMARCdrift alongside it — receivers send reports to every address listed.
Your assigned address is shown in your domain settings. It looks like d-abc123@in.dmarcdrift.com.
Where the rua= tag goes
The DMARC record lives at _dmarc.yourdomain.com as a TXT record. The rua= tag is one of several optional fields within it. It accepts one or more mailto: URIs, comma-separated, with no spaces around the commas.
Example: no existing DMARC record
Create a new TXT record at _dmarc.yourdomain.com:
"v=DMARC1; p=none; rua=mailto:d-abc123@in.dmarcdrift.com"Replace d-abc123 with your actual assigned address. Start with p=none — it's monitoring-only and won't affect mail delivery.
Example: existing DMARC record with one rua= address
If your current record looks like:
"v=DMARC1; p=none; rua=mailto:reports@yourdomain.com"Update it to:
"v=DMARC1; p=none; rua=mailto:reports@yourdomain.com,mailto:d-abc123@in.dmarcdrift.com"No comma before mailto:, no space after the comma. Both addresses receive the same reports.
Example: existing DMARC record with multiple rua= addresses
Append DMARCdrift to the end of the existing list:
"v=DMARC1; p=none; rua=mailto:first@yourdomain.com,mailto:second@yourdomain.com,mailto:d-abc123@in.dmarcdrift.com"DNS propagation expectations
Most DNS changes propagate within a few minutes to a few hours, though the technical TTL maximum is 48 hours. In practice, propagation is usually complete within an hour.
You can check whether your updated record is visible using the DMARC check tool. Enter your domain and confirm the rua= field shows your DMARCdrift address.
DMARC aggregate reports are sent once per day by most receivers, so even after propagation you'll wait up to 24 hours for your first report.
Common DNS host formatting mistakes
Different DNS providers have different interfaces. Watch out for these:
Quotes: Some providers require the record value to be wrapped in double quotes; others add them automatically. If your provider asks for the "value" of the TXT record, enter the content without quotes. If it asks for the full record text, include them.
Hostname field: Enter _dmarc as the hostname (not _dmarc.yourdomain.com — most providers append your domain automatically). Some providers show it with a trailing dot: _dmarc. — that's fine.
Multiple strings: Some DNS providers split long TXT records into 255-character chunks. DMARC records are usually short enough to avoid this, but if your provider automatically splits the value, the record may not parse correctly. Verify with the DMARC check tool after publishing.
Duplicate DMARC records: A domain can only have one valid _dmarc TXT record. If you add a new record instead of editing the existing one, you'll end up with two records. Most DNS providers will warn about this; some won't. Check for duplicates if reports aren't arriving.
Next: When reports start arriving: timing expectations and what to look for in your first reports.