How to Add a DMARC Record in cPanel: Step-by-Step Guide

If your website is hosted on a server that uses cPanel, adding a DMARC record is a straightforward process using the built-in Zone Editor. cPanel is the most widely used hosting control panel, found on hosts like Bluehost, HostGator, A2 Hosting, SiteGround, and many others. The interface may vary slightly between hosts, but the core steps are the same.

This guide walks you through adding a DMARC TXT record using cPanel's Zone Editor, verifying it works, and handling the common issues that come up on shared hosting environments.

Before You Start

Confirm cPanel manages your DNS. If you registered your domain at one provider (like Namecheap or GoDaddy) but pointed the nameservers to your hosting provider, cPanel is likely managing your DNS. If you are unsure, check the nameservers for your domain. They usually look something like ns1.yourhostingcompany.com. If the nameservers point to Cloudflare or your registrar, you need to add the record there instead.

Have your DMARC record ready. A good starting record for monitoring looks like:

v=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.com;

If you need help choosing your policy and tags, use our DMARC record generator or see the DMARC setup guide for a full explanation of each tag.

Make sure SPF and DKIM are configured. DMARC depends on SPF and DKIM to work -- for an overview of how these protocols interact, see SPF vs DKIM vs DMARC. If you use cPanel's built-in email, your hosting provider may have already configured SPF automatically. Check your DNS zone for an existing SPF record. If you do not have one, you can create it at spfcreator.com. For DKIM, many cPanel hosts enable it automatically through the "Email Deliverability" section in cPanel. Check there first.

Step-by-Step: Adding DMARC in cPanel

Verifying the Record Is Live

After saving the record in cPanel, it should take effect almost immediately for queries going through your hosting server's DNS. To verify from the outside:

Wait five to ten minutes, then check your record at dmarcrecordchecker.com. Enter your domain and look for your DMARC record.

Verify the contents are correct: the record should start with v=DMARC1, include your chosen policy, and show your reporting email address if you included one.

You can also verify from the command line if you prefer. On Windows, open Command Prompt and run:

nslookup -type=TXT _dmarc.yourdomain.com

On Mac or Linux, use:

dig TXT _dmarc.yourdomain.com

Both commands should return your DMARC record string.

Common cPanel Issues

The Name Field Format

cPanel's Zone Editor is inconsistent about how it handles the Name field. Some versions expect the full hostname with a trailing dot (_dmarc.yourdomain.com.), while others only want the subdomain (_dmarc). If you are unsure, look at how your other DNS records are formatted in the Zone Editor. Match that format.

If you accidentally create the record with the wrong name, you will see it in the zone file but it will not resolve correctly. Delete it and recreate it with the correct name format.

Shared Hosting and Email Sending

On shared hosting, your server shares an IP address with many other websites. This means the server's IP reputation is influenced by what other sites on the server are doing. If another site on your shared server sends spam, it can affect your email deliverability even with perfect DMARC, SPF, and DKIM setup.

This is not something DMARC can fix -- it is a limitation of shared hosting for email sending. If email deliverability is critical to your business, consider using a dedicated email sending service like Google Workspace, Microsoft 365, or a transactional email provider instead of relying on your shared hosting server's email. Our DMARC for self-hosted email guide covers the trade-offs between running your own mail server and using a managed provider.

cPanel Already Has SPF or DKIM Records

Many hosting providers automatically create SPF and DKIM records when you set up email in cPanel. Check the "Email Deliverability" section in cPanel to see the current status. If SPF and DKIM are already valid, you are in good shape to add DMARC.

If cPanel shows warnings about SPF or DKIM, use the "Repair" or "Install" buttons to fix them automatically. Get SPF and DKIM passing before you worry about DMARC enforcement.

Duplicate DMARC Records

If a previous admin or an automated tool already created a DMARC record, you might end up with duplicates. Having two TXT records at _dmarc.yourdomain.com will cause DMARC validation to fail. Scroll through your zone file in the Zone Editor and look for any existing _dmarc TXT records. Delete the old one before adding your new record, or edit the existing one instead.

Updating Your Record Later

To change your DMARC policy later (for example, moving from p=none to p=quarantine), go back to the Zone Editor, find your DMARC TXT record, and click the Edit button. Change the value and save. The update should take effect within a few minutes to a few hours depending on TTL and DNS caching.

Move gradually through the enforcement levels. Start with p=quarantine; pct=25; and increase over time. For the full progression path, see our DMARC policy levels guide.

Monitor Your DMARC Record

You've created your DMARC record — now make sure it keeps working. The Email Deliverability Suite watches your SPF, DKIM, DMARC, and MX records daily and alerts you when something breaks.