Email records
How do I publish DMARC, SPF and DKIM at my DNS host?
Pick your DNS host and your mail service below.
Last read from the sources at the foot of this page.
Your DNS record
- Type
- TXT
- Name
_dmarc- Value
v=DMARC1; p=none; rua=mailto:[email protected]
Where every DMARC page starts. Pick your host below for the steps.
01
How do I publish DMARC at my DNS host?
DMARC tells mail servers what to do with mail forged in your name.
- GoDaddy for Microsoft 365
- GoDaddy for Google Workspace
- GoDaddy for Zoho Mail
- Cloudflare for Microsoft 365
- Cloudflare for Google Workspace
- Cloudflare for Zoho Mail
- Squarespace for Microsoft 365
- Squarespace for Google Workspace
- Squarespace for Zoho Mail
- Wix for Microsoft 365
- Wix for Google Workspace
- Wix for Zoho Mail
- SiteGround for Microsoft 365
- SiteGround for Google Workspace
- SiteGround for Zoho Mail
- Network Solutions for Microsoft 365
- Network Solutions for Google Workspace
- Network Solutions for Zoho Mail
- Amazon Route 53 for Microsoft 365
- Amazon Route 53 for Google Workspace
- Amazon Route 53 for Zoho Mail
- Hostinger for Microsoft 365
- Hostinger for Google Workspace
- Hostinger for Zoho Mail
- IONOS for Microsoft 365
- IONOS for Google Workspace
- IONOS for Zoho Mail
- Namecheap for Microsoft 365
- Namecheap for Google Workspace
- Namecheap for Zoho Mail
- Microsoft Azure DNS for Microsoft 365
- Microsoft Azure DNS for Google Workspace
- Microsoft Azure DNS for Zoho Mail
02
How do I publish SPF at my DNS host?
SPF lists the services allowed to send mail as your domain.
- GoDaddy for Microsoft 365
- GoDaddy for Google Workspace
- GoDaddy for Zoho Mail
- Cloudflare for Microsoft 365
- Cloudflare for Google Workspace
- Cloudflare for Zoho Mail
- Squarespace for Microsoft 365
- Squarespace for Google Workspace
- Squarespace for Zoho Mail
- Wix for Microsoft 365
- Wix for Google Workspace
- Wix for Zoho Mail
- Network Solutions for Microsoft 365
- Network Solutions for Google Workspace
- Network Solutions for Zoho Mail
- Amazon Route 53 for Microsoft 365
- Amazon Route 53 for Google Workspace
- Amazon Route 53 for Zoho Mail
- Hostinger for Microsoft 365
- Hostinger for Google Workspace
- Hostinger for Zoho Mail
- IONOS for Microsoft 365
- IONOS for Google Workspace
- IONOS for Zoho Mail
- Namecheap for Microsoft 365
- Namecheap for Google Workspace
- Namecheap for Zoho Mail
03
How do I publish DKIM at my DNS host?
DKIM signs each message so a forged or changed one fails.
- GoDaddy for Microsoft 365
- GoDaddy for Google Workspace
- GoDaddy for Zoho Mail
- Cloudflare for Microsoft 365
- Cloudflare for Google Workspace
- Cloudflare for Zoho Mail
- Squarespace for Microsoft 365
- Squarespace for Google Workspace
- Squarespace for Zoho Mail
- Wix for Microsoft 365
- Wix for Google Workspace
- Wix for Zoho Mail
- SiteGround for Microsoft 365
- SiteGround for Google Workspace
- SiteGround for Zoho Mail
- Network Solutions for Microsoft 365
- Network Solutions for Google Workspace
- Network Solutions for Zoho Mail
- Amazon Route 53 for Microsoft 365
- Amazon Route 53 for Google Workspace
- Amazon Route 53 for Zoho Mail
- Hostinger for Microsoft 365
- Hostinger for Google Workspace
- Hostinger for Zoho Mail
- IONOS for Google Workspace
- IONOS for Zoho Mail
- Namecheap for Microsoft 365
- Namecheap for Google Workspace
- Namecheap for Zoho Mail
- Microsoft Azure DNS for Google Workspace
- Microsoft Azure DNS for Zoho Mail
Sources
Where does this come from?
- GoDaddy: adding a TXT recordgodaddy.comRead 14 October 2026
- GoDaddy: adding a CNAME recordgodaddy.comRead 14 October 2026
- Cloudflare: adding a TXT recorddevelopers.cloudflare.comRead 14 October 2026
- Cloudflare: Proxy statusdevelopers.cloudflare.comRead 14 October 2026
- Cloudflare: adding a CNAME recorddevelopers.cloudflare.comRead 14 October 2026
- Squarespace: adding a TXT recordsupport.squarespace.comRead 14 October 2026
- Squarespace: adding a CNAME recordsupport.squarespace.comRead 14 October 2026
- Wix: adding a TXT recordsupport.wix.comRead 14 October 2026
- Wix: adding a CNAME recordsupport.wix.comRead 14 October 2026
- SiteGround: adding a TXT recordsiteground.comRead 14 October 2026
- Network Solutions: adding a TXT recordnetworksolutions.comRead 14 October 2026
- Amazon Route 53: adding a TXT recorddocs.aws.amazon.comRead 14 October 2026
- Amazon Route 53: Supported DNS record typesdocs.aws.amazon.comRead 14 October 2026
- Hostinger: adding a TXT recordhostinger.comRead 14 October 2026
- Hostinger: adding a CNAME recordhostinger.comRead 14 October 2026
- IONOS: adding a TXT recordionos.comRead 14 October 2026
- Namecheap: adding a TXT recordnamecheap.comRead 14 October 2026
- Namecheap: adding a CNAME recordnamecheap.comRead 14 October 2026
- Microsoft Azure DNS: adding a TXT recordlearn.microsoft.comRead 14 October 2026
- Microsoft: Set up DMARC for your Microsoft 365 domainlearn.microsoft.comRead 14 October 2026
- Microsoft: Set up SPF for your Microsoft 365 domainlearn.microsoft.comRead 14 October 2026
- Microsoft: Set up DKIM for your Microsoft 365 domainlearn.microsoft.comRead 14 October 2026
- Google Workspace: Set up DMARCknowledge.workspace.google.comRead 14 October 2026
- Google Workspace: Set up SPFknowledge.workspace.google.comRead 14 October 2026
- Google Workspace: Set up DKIMknowledge.workspace.google.comRead 14 October 2026
- Zoho Mail: DMARC policyzoho.comRead 14 October 2026
- Zoho Mail: SPF configurationzoho.comRead 14 October 2026
- Zoho Mail: DKIM configurationzoho.comRead 14 October 2026
05 · Check my firm
See what is open before anyone else does.
We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.
What we readPublic sources only
Who sees itYou alone
Delivery72 hours from confirmation
Meeting firstNone
See a sample reading → An invented firm, so you see what arrives before you ask for yours.
Reading requestPrivate
Received
A person reads your firm from outside and emails your outside reading within 72 hours, from [email protected].
What happens next
- We read your firm from outside.
- You see what is open, with the proof for the lead finding.
- If it is worth it, you order.
While you wait: the 72 hours · 34 seconds, no sound
What happens if you go ahead. More at getleaktrace.com/see-it-first/.
Read the transcript
- 72 hours. One domain. Nothing to install.
- Discover. Every way in, found from outside.
- Validate. Every finding, proven. Dated and checkable by anyone.
- Close. Forged email: one click per step, where we reach your DNS host and you approve it.
- You get the fix for the rest, step by step, and we re-check until it is closed.
- Monitor. On monitoring: email settings, look-alikes and new host names re-checked every hour. Alerts within the hour.
- Every paid assessment is human-verified before release.
- The AI defense layer for businesses. getleaktrace.com/see-it-first/