The domain does not verify

On every plan

We verify a domain when one of two TXT records answers at the domain's own name servers: the DMARC record with your reporting address in rua, or the verification record. When neither counts, the name or the value is off, often by a few characters. Compare both with the domain's Home tab.

What we look for

Either record verifies the domain. One is enough.

• The DMARC record at _dmarc.example.com. Its rua tag has to contain mailto: and your reporting address. This record also starts the reports, so most people publish it and skip the other.
• The verification record at _mailmoni-verify.example.com. Its value is the code shown on the domain's Home tab, which never changes.

Both are TXT records. The Home tab shows the name and the value of each, with a button that copies them.

The name

Some DNS hosts add your domain to every name you type. At those hosts, type only the first part: _mailmoni-verify or _dmarc. If you type the whole name there, the record ends up at _mailmoni-verify.example.com.example.com, and we do not find it.

Other hosts want the whole name. Look at how your host lists the records you already have. If it shows them without your domain, type the new name without it too.

The value

Copy the value with the button rather than typing it. Quotation marks around the value make no difference, and neither do spaces before or after it. Everything else has to match exactly.

In the DMARC record, the address in rua has to be your reporting address. Capital letters make no difference. Another address next to it, after a comma, does not stop the check.

If the DMARC record sends reports only to other addresses, Check now on the domain's Home tab says so and shows the same record with your address added. Publish that value in place of the record you have. If the name holds more than one DMARC record, the tab says so: delete them all and publish the one record it shows. If the domain already has a DMARC record says more.

When we check

• We ask your domain's own name servers, not a cache, so we see a record as soon as your DNS host publishes it. Some hosts take a few minutes to an hour to publish a change.
• For 7 days after you add the domain, we check by ourselves every 15 minutes. After that, only Check now on the domain's Home tab checks.
• Check now runs at most once a minute for each domain. Pressed again sooner, it asks you to wait.
• If the tab says we could not reach DNS, the failure was ours or the network's, not your record's. Try again in a minute.

When the domain verifies, the organization's admins get an email.

Publishing through Cloudflare

With Cloudflare connected, we can write the DMARC record and the TLS-RPT record into your zone. We cannot write the verification record. Publish the DMARC record through Cloudflare instead, and the next check verifies the domain.

Published 27 October 2026 · Checked 27 October 2026