Defaults.Exposed

Defaults.Exposed › Setup › DMARC

How to set up DMARC on Hostinger

Add a DMARC record in Hostinger to tell mail providers what to do with email that fails your checks.

Why this matters to your business

DMARC ties SPF and DKIM together and adds the missing instruction: what should a receiving mail provider do when an email claiming to be from you fails the checks? Without DMARC, each provider guesses. With it, you decide — and you can ask them to send you reports showing who is sending mail in your name.

In plain terms: DMARC is what actually stops criminals from spoofing your domain to scam your customers or staff. It’s the policy on top of the locks SPF and DKIM provide — free, and well worth the few minutes.

Set up SPF and DKIM first

DMARC works by checking the results of SPF and DKIM. If you haven’t added those yet, do them first — a DMARC policy with nothing underneath it has nothing to enforce.

Confirm Hostinger runs your DNS

This record only works if Hostinger is answering DNS for your domain. Hostinger is your DNS host here, which is only the case when your domain’s nameservers point to Hostinger’s nameservers. In hPanel, open Domains, select your domain, and check the DNS / Nameservers section. If the nameservers point to Hostinger, continue below. If they point to another company (a different web host, Cloudflare, your email provider), add the DMARC record at whichever provider runs your DNS instead.

Step-by-step on Hostinger

  1. Sign in to Hostinger and open hPanel.
  2. Go to Domains, select your domain, then open the DNS / Nameservers (DNS Zone) section.
  3. Find the area for adding a record (look for Add Record or Manage DNS records).
  4. Set Type to TXT.
  5. In the Name field, enter exactly: _dmarc Do not type your domain name after it — Hostinger appends the domain for you.
  6. In the TXT value field, start gently with a monitoring-only policy: v=DMARC1; p=none; rua=mailto:[email protected] Replace the address with a mailbox you actually read. This asks providers to email you summary reports without changing how any mail is treated yet.
  7. Leave TTL at the default.
  8. Click Add Record to save.

Choosing your policy (the p= part)

Run p=none for a few weeks, read the reports to confirm all your legitimate mail passes, then move up to quarantine and finally reject. Jumping straight to reject before you’ve checked the reports risks blocking your own genuine email.

Hostinger quirks people get wrong

Verify it worked

Once saved and propagated, run the free check on this site. It will tell you in plain language whether your DMARC record is in place and what policy you’ve set.

Done? Check your domain free to confirm it worked — and see your full grade across all 34 checks.