How do I add a DMARC record at Wix for Google Workspace?
Add one TXT record named _dmarc in your Wix DNS records, with the value v=DMARC1; p=none; rua=mailto:[email protected]. Read the reports it brings, then raise it to p=quarantine and then p=reject. At p=none mail servers are asked to take no action, so it is a setting for reading reports, not protection.
Last read , from the sources at the foot of this page.
What does a DMARC record do?
It tells mail servers what to do with a message that uses your domain but did not come from a service you approved. It also asks them to send you reports on who sends mail in your name.
What record do I publish for Google Workspace?
A TXT record named _dmarc. Start with the first value below. Replace yourfirm.example with your own domain, and use a mailbox someone reads for the reports.
v=DMARC1; p=none; rua=mailto:[email protected]v=DMARC1; p=quarantine; rua=mailto:[email protected]v=DMARC1; p=reject; rua=mailto:[email protected]How do I add it at Wix?
- Sign in to Wix and go to Domains.
- Click the Domain Actions icon beside your domain and select Manage DNS Records.
- Click + Add Record in the TXT section.
- Type _dmarc in Host Name. Leave your domain name out: it is added for you.
- Paste the record in Value, exactly as copied.
- Click Save.
This works when your domain is connected to Wix by name servers. If it is connected by pointing, add the record at the company that holds the domain instead.
In our words, from Wix: adding a TXT record, read 14 October 2026. If a screen has changed since, follow the host's own page.
When do I move past p=none?
When the reports show every service that sends mail for you passing. Before each step, check that your mail, invoicing, booking and newsletter services are in your SPF record or sign their mail with DKIM. A service that is missing will have its mail sent to spam, or refused.
Move to p=quarantine first. Google suggests you may start with a small share of messages using pct, and move up to 100. Then move to p=reject, which asks mail servers to refuse a message that fails.
Where does this come from?
- Google Workspace: Set up DMARCRead 14 October 2026
- Wix: adding a TXT recordRead 14 October 2026
- RFC 7489, DMARC (section 6.3)Read 14 October 2026
See what is open before anyone else does.
We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.
- We read your firm from outside.
- You see what is open, with the proof for the lead finding.
- If it is worth it, you order.
What happens if you go ahead. More at getleaktrace.com/see-it-first/.
Read the transcript
- 72 hours. One domain. Nothing to install.
- Discover. Every way in, found from outside.
- Validate. Every finding, proven. Dated and checkable by anyone.
- Close. Forged email: one click per step, where we reach your DNS host and you approve it.
- You get the fix for the rest, step by step, and we re-check until it is closed.
- Monitor. On monitoring: email settings, look-alikes and new host names re-checked every hour. Alerts within the hour.
- Every paid assessment is human-verified before release.
- The AI defense layer for businesses. getleaktrace.com/see-it-first/