Is DMARC record really as simple as it sounds?

Topic summary

Urgent requirement: merchants must publish a DMARC record by Feb 1, 2024 to satisfy Google/Yahoo. DMARC (policy telling receivers how to handle unauthenticated mail) relies on SPF (authorized sending servers) and DKIM (cryptographic signature) being set first.

Experiences diverge:

  • Some added a simple TXT record (_dmarc.domain) with p=none and an rua address, verified via tools (dmarcian). Others set p=quarantine immediately.
  • Several report DMARC passing but SPF/DKIM failing for some senders (e.g., Mailchimp/Klaviyo/Microsoft 365/Shopify mailer). One user “fixed” SPF checks by adding include:shops.shopify.com, though this conflicted with later guidance.

Latest guidance from Shopify: ensure the 4 CNAME “authenticate” records are added; this creates a mailer subdomain (e.g., mailer123.yourdomain.com) whose SPF Shopify manages, so no extra SPF changes are needed for Shopify on your root domain. You still must configure SPF/DKIM for other providers (Google Workspace, Klaviyo, Mailchimp, etc.).

Recommended approach:

  • Start with p=none + rua to collect reports; analyze via tools (EasyDMARC/dmarcian), then phase to quarantine/reject.
  • Create a dedicated reports mailbox.

Open issues: ongoing SPF fails tied to mailer.shopify.com, DNS host support confusion, Klaviyo subdomain/CNAME conflicts, and how to interpret reports. No final resolution; several users still seeking expert help.

Summarized with AI on December 20. AI used: gpt-5.

I just got DMARC set up on our Namecheap domain. It was a straightforward process:

  1. Login to the main dashboard

  2. Click the Manage button next to the domain

  3. Click on the Advanced DNS tab

  4. At the bottom of the records list, click on + Add new record

  5. From the popup, scroll down and select TXT Record

  6. Fill in the new form on the right with these exact files

  • Host:
_dmarc​
  • Value:
v=DMARC1; p=none;​
  • Leave Automatic selected for the TTL
  1. Click on the :white_check_mark:

From there, you can verify that things are working properly by sending a test email from the Shopify admin. In Gmail, you can click <> Show original on the email, and you should see something like this, confirming that it all works: