Email & DNS guide
Publishing DMARC in Cloudflare DNS
Understand where to add the policy when Cloudflare hosts your authoritative DNS.
Confirm where your DNS lives
Check the domain's authoritative nameservers. If Cloudflare hosts the active zone, manage the DMARC record there even if your domain was bought elsewhere. Editing an inactive copy of a zone will not change the answers receivers see.
Prepare the policy
DMARC is a TXT policy at _dmarc under your sending domain. Plan reporting and review existing SPF and DKIM before requesting enforcement. Cloudflare's email DNS tools can help publish records, but the right policy still depends on your actual sending services.
Edit the authoritative zone
In the domain's DNS records, add or edit the appropriate TXT record with the prepared policy. Preserve unrelated TXT values. Record the previous value and TTL for rollback. Use Cloudflare's current documentation for dashboard-specific steps; labels can change.
Verify outside the dashboard
Wait for previous cached answers to expire, then query the policy publicly. Test mail from your actual provider and review alignment. Hosting DNS in Cloudflare does not mean Cloudflare is the sender of your business email; authentication must cover the service that sends it.
Primary references
Provider dashboards and instructions can change. Confirm current values with your provider before editing DNS.