dmarcula

Troubleshooting.

When something's not right, it's almost always one of a handful of things. Here's the quick triage, most common first.

"I added the record but no reports yet."

The most common one, and usually not a problem at all. Aggregate reports come from mailbox providers on their schedule, roughly once a day, so your first data normally lands 24–72 hours after your record goes live. If it's been less than that, you're simply waiting on the providers.

  • Low-volume domains report slowly. Providers only report on mail they actually saw, so a quiet domain gets fewer, slower reports. There's just less to tell you about.
  • Past 72 hours with nothing at all? A typo in the DNS record is the usual culprit. Run down the checklist below.

"My DNS record isn't being detected."

dmarcula checks for your record automatically. Usually within a minute. If it's not flipping to verified, run down this list:

  • Check the host/name field. It should be _dmarc for your domain. Heads-up: many DNS panels automatically append your domain to the host, so typing the full _dmarc.yourdomain.com can quietly become _dmarc.yourdomain.com.yourdomain.com. When in doubt, enter just _dmarc.
  • Only one DMARC record. A domain may have exactly one _dmarc TXT record. A leftover second one makes DMARC invalid. Delete the old one.
  • Copy the value whole. No line breaks, and watch for "smart quotes" if you retyped it. The value is plain text starting with v=DMARC1.
  • Right zone. The record goes on the domain you're monitoring, at the DNS host that's actually authoritative for it. If you recently moved DNS, make sure you're editing the live provider.
  • Give it a minute. DNS changes take a few minutes to propagate (longer with a high TTL). The in-app status panel keeps re-checking on its own.

Easiest path: use the exact record dmarcula generates. Copy it, or hit Send to my DNS admin. Reports addressed to us are authorized for your domain automatically, so there's nothing extra to add.

"Reports are arriving, but fewer than I expected."

  • Providers only report on mail they actually received claiming to be you, so volume tracks your real sending. Quiet domain, quiet reports.
  • Not every mailbox provider sends DMARC reports, and failure (RUF) reports especially are rare. Many providers withhold them for privacy reasons.
  • This is normal. Aggregate (RUA) data from the big providers is what paints the real picture.

"My Microsoft 365 connection won't link."

  • You don't need it for reports to flow. The Microsoft 365 connection only auto-detects your domains during setup. Reports arrive via your DNS record regardless of whether it's connected.
  • Reconnect from Settings → Microsoft 365 if it expired. The first connection may need a tenant admin to grant consent.
  • Still stuck? Switch to the manual path. Just confirm your domain name and add the record by hand. Nothing is lost.

Still stuck?

Email support@dmarcula.com with your domain and what you're seeing, and we'll dig in with you. If you haven't set things up yet, the Getting started guide walks through it step by step.