Pre-requirements
- Access to WHM or cPanel account with DNS management privileges.
- Basic understanding of DMARC and email authentication.
- Ability to navigate the DNS Zone Manager.
Introduction
A DMARC (Domain-based Message Authentication, Reporting, and Conformance) record helps prevent email spoofing and phishing by allowing the sender to specify how their email is authenticated. This guide will show you how to create a DMARC record in the DNS Zone Manager of your cPanel or WHM account.
Steps to Create a DMARC Record
| Step | Description | Linux Command | Windows Command (via SSH) |
|---|---|---|---|
| 1. Log into WHM or cPanel | Log into your WHM or cPanel account where you want to add the DMARC record. | No specific command. Perform this via the cPanel/WHM interface. | |
| 2. Access DNS Zone Manager | In WHM or cPanel, go to DNS Zone Manager. Click the "Manage" button next to the domain you want to configure. | No specific command. Navigate through the interface. | |
| 3. Add a New DMARC Record | Click the arrow next to the "Add Record" button, and select DMARC from the dropdown. The DMARC record editor will assist you in creating the appropriate record with your desired configuration. | No specific command. Perform this through the DNS Zone Manager in WHM or cPanel. | |
| 4. Configure the DMARC Record | Use the DMARC editor to configure the policy options, such as p=none, p=quarantine, or p=reject depending on your needs. |
No specific command. Use the options provided by the DMARC editor in the DNS Zone Manager. | |
| 5. Add the DMARC Record | Once you've configured the DMARC record, click the "Add Record" button. This will add the DMARC entry to your DNS zone. | No specific command. Click "Add Record" in the DNS Zone Manager. | |
| 6. Verify DMARC Record | Check that the DMARC record has been successfully added to the DNS by using command-line tools such as dig or online DNS lookup tools. |
|
|
Gotchas to Avoid
- Incorrect DNS Propagation: After adding a DMARC record, it can take time for DNS changes to propagate. Use
digor DNS lookup tools to confirm that the record is live. - Misconfigured Policies: Ensure the DMARC policy you select (e.g.,
p=none,p=quarantine, orp=reject) fits your domain's email authentication needs. - Missing Subdomain Policy: If you manage subdomains, be sure to include the
sptag to specify how DMARC applies to subdomains.
Setting up a DMARC record in cPanel or WHM is a crucial step in securing your domain's email. By following this guide, you can easily configure and add a DMARC record to your DNS zone to prevent email spoofing and phishing attempts. Always verify that your DNS changes have propagated successfully to ensure the DMARC record is active.
For more information on DMARC and email security, visit our Knowledge Base.
