If a check reports "no DMARC record found," it means there is no _dmarc TXT record published for your domain. Without it, receivers have no policy to apply and no way to report spoofing back to you. Your domain can be impersonated and you will not even see it happening. Here is how to fix it.
Why it happens
The most common causes are simply never having set DMARC up, publishing the record on the wrong name, or a typo. DMARC must live at the exact host _dmarc.yourdomain.com as a TXT record. A record on the root domain or a misspelled host will not be found.
The fix
Add a TXT record at _dmarc.yourdomain.com with at least a policy and a reporting address:
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com
Start with p=none so you collect reports without affecting delivery. Once you have confirmed your legitimate senders pass, advance toward p=reject. See how to set up DMARC.
Common mistakes to avoid
- Publishing at
yourdomain.cominstead of_dmarc.yourdomain.com. - Two DMARC records on the same host. Publish only one.
- Leaving out
rua, which throws away your visibility.
Verify
Publish the record, wait for propagation, then scan again. The DMARC check should turn green.
Reads public DNS only. Nothing is stored unless you save the domain to an account.