You got **is missing DMARC** or **DMARC record is malformed**. Receiving servers have no usable policy for the From domain.

Lumail does not create this record for you.

## What to add

| Type | Host | Value |
| --- | --- | --- |
| TXT | `_dmarc` | `v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com` |

Use your own mailbox for `rua=` if you want aggregate reports. `rua=` is optional.

`p=none` is a valid starting policy. Lumail will then open **DMARC policy is monitoring only** until you move to `quarantine` or `reject`. That is expected — see [How to strengthen DMARC](/docs/deliverability/how-to-strengthen-dmarc).

## Malformed record

The TXT must:

- Start with `v=DMARC1`
- Include `p=none`, `p=quarantine`, or `p=reject`

Typical breaks: a CNAME on `_dmarc`, two TXT records, `p=` missing, or a typo like `v=DMARC`.

## Subdomains

If you send from `news.example.com` and `_dmarc.news.example.com` is empty, Lumail uses `_dmarc.example.com`. Publishing DMARC only on the root is enough. Publish a subdomain record only when that subdomain needs a different policy.

## After you add it

On **Domains → the domain**, click verify / **Check that they are live**. DNS can take up to 48 hours.

## Related

- [How to strengthen DMARC](/docs/deliverability/how-to-strengthen-dmarc)
- [Email Domains](/docs/domains/email-domains)