How to Set Up DMARC for Salesforce

Publish a DMARC record to protect your domain when sending email through Salesforce.

Quick Answer — The Record You Need

Record Type

TXT

Host / Name

_dmarc

Value

v=DMARC1; p=none; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=1

Configure SPF with custom return-path and DKIM in Salesforce before enforcing.

Step-by-Step Setup

Set up SPF and DKIM in Salesforce

Ensure both SPF and DKIM are configured. Use a custom return-path domain for SPF alignment.

Test alignment

Send test emails from Salesforce and verify SPF and DKIM pass with alignment in the email headers.

Create the DMARC record

Add a TXT record at _dmarc.yourdomain.com.

v=DMARC1; p=none; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=1

Monitor reports

Analyze DMARC aggregate reports for several weeks to confirm alignment.

Enforce gradually

Move from p=none to p=quarantine to p=reject.

Common Gotchas

Salesforce email may not achieve SPF alignment without a custom return-path domain. DKIM alignment is the more reliable path for DMARC with Salesforce.
If you use both core Salesforce and Marketing Cloud, both need to be authenticated for DMARC to pass.
Automated Salesforce emails (workflow rules, process builder) use the same authentication as standard emails.

Verify Your Setup

After adding your DNS records, use our free DMARC checker to verify everything is configured correctly. DNS changes typically propagate within minutes, but can take up to 48 hours.

Frequently Asked Questions

Does Salesforce support DMARC alignment?

Yes. DKIM provides alignment when keys are configured. SPF alignment requires a custom return-path domain.

Do I need DMARC for both core Salesforce and Marketing Cloud?

DMARC is per domain, not per service. One record covers all email from your domain. But both services must be authenticated.

Will DMARC enforcement affect Salesforce automated emails?

If SPF and DKIM are properly configured, no. Automated emails use the same authentication as manual ones.