How to Set Up DMARC on IONOS (1&1): DNS Configuration Guide

IONOS (formerly 1&1 Internet) is one of Europe's largest hosting and domain providers, with millions of domains under management. If your domain is registered or hosted with IONOS, adding a DMARC record is a straightforward process through their DNS settings panel. The interface has been modernized in recent years, making it easier to navigate than the old 1&1 dashboard.

This guide walks you through adding a DMARC TXT record in the IONOS control panel, configuring SPF and DKIM if you use IONOS email, and verifying everything works. If you have not built your DMARC record yet, start with our how to create a DMARC record guide.

Before You Start

Make sure you have these things ready:

Your DMARC record value. A good starting record for monitoring looks like:

v=DMARC1; p=none; rua=mailto:dmarc-reports@yourdomain.com;

Start with p=none to collect reports before enforcing anything. You can upgrade your policy later once you have confirmed all your legitimate email passes authentication. See our DMARC policy levels guide for the full breakdown.

Access to your IONOS account. You need to be the account owner or have credentials to manage DNS settings. If you have a managed hosting plan, you may need to contact IONOS support for DNS access.

SPF and DKIM already configured. DMARC depends on SPF and DKIM working correctly. If you use IONOS email, check your DNS records for existing SPF and DKIM entries. If you use a third-party email provider, make sure those authentication records are in place too.

Step-by-Step: Adding DMARC in IONOS

SPF and DKIM on IONOS

DMARC checks whether SPF or DKIM passes and aligns with your From address. Both should be configured before you enforce your DMARC policy. For a detailed comparison of how these protocols work together, see SPF vs DKIM vs DMARC.

SPF for IONOS Email

If you use IONOS email hosting (Mail Basic, Mail Business, or the included email with hosting plans), IONOS typically creates a default SPF record for you. Check your TXT records in the DNS settings for a record starting with v=spf1. It usually looks something like:

v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de ~all

If you also send email through other services (Google Workspace, Mailchimp, SendGrid, etc.), you need to include those in your SPF record as well. Build a comprehensive SPF record at spfcreator.com that covers all your sending sources.

DKIM for IONOS Email

IONOS supports DKIM signing for its email services. Depending on your plan, DKIM may be enabled automatically or you may need to activate it in your email settings. Check your IONOS email configuration for DKIM options. When enabled, IONOS publishes the necessary DKIM DNS records automatically.

If you use a third-party email provider (like Google Workspace or Microsoft 365) alongside IONOS, you need to set up DKIM for that provider separately. Add the DKIM DNS records in the IONOS DNS editor. You can generate DKIM records at dkimcreator.com.

IONOS Email vs Third-Party Email

Your DMARC configuration depends on how you send email. Here are the common IONOS setups:

Using IONOS Email Only

If IONOS is your sole email provider, make sure your SPF record includes IONOS servers and DKIM is enabled in your IONOS email settings. This is the simplest scenario — one provider, one set of authentication records.

Using Google Workspace or Microsoft 365

If you use a third-party email provider but manage DNS through IONOS, you need:

• An SPF record that includes your email provider (for example, include:_spf.google.com for Google Workspace)
• DKIM records from your email provider added to IONOS DNS
• MX records pointing to your email provider (these should already be set if email is working)

Remove or update any IONOS-specific email SPF entries if you are no longer using IONOS email. Having old SPF includes that no longer apply will not break DMARC, but keeping your SPF record clean is good practice.

Using Both IONOS Email and a Marketing Platform

If you use IONOS for day-to-day email and a platform like Mailchimp or Klaviyo for marketing campaigns, your SPF record needs to include both services. Each service also needs its own DKIM setup. This is the most complex scenario and the most important one to get right before enforcing DMARC. If you run your own mail server behind an IONOS domain, our DMARC for self-hosted email guide covers additional authentication steps.

Verifying Your DMARC Record

After saving the record in IONOS, wait five to ten minutes and then check it at dmarcrecordchecker.com. Enter your domain and verify:

• The record starts with v=DMARC1
• Your chosen policy is present
• The rua reporting address is correct if you included one
• There is only one DMARC record (no duplicates)

If the record does not appear, double-check that your domain's nameservers are managed by IONOS. You can verify this in your domain settings under Domains & SSL. If nameservers point elsewhere, add the record at that DNS provider instead.

Troubleshooting IONOS DNS Issues

Record Not Appearing

The most common causes are:

• Nameserver mismatch. If your nameservers point to another provider, records added in IONOS will not resolve publicly.
• Typo in the hostname. The host field must be _dmarc with the underscore. Even a small typo puts the record in the wrong location.
• Propagation delay. IONOS is usually fast, but give it up to an hour before troubleshooting further.

Updating Your Record Later

When you are ready to move from monitoring to enforcement, find your DMARC TXT record in the IONOS DNS settings and click Edit. Update the policy value and save. Start with p=quarantine; pct=25; and increase gradually. For the full enforcement path, see our DMARC policy levels guide.

Legacy 1&1 Interface

If your account still uses the older 1&1 interface, the navigation may look different. Look for Domains > DNS Settings or Domains > Edit DNS Settings. The actual record creation process is the same — select TXT, enter _dmarc as the subdomain, paste your value, and save.

Monitor Your DMARC Record

You've created your DMARC record — now make sure it keeps working. The Email Deliverability Suite watches your SPF, DKIM, DMARC, and MX records daily and alerts you when something breaks.