DNS record added at the wrong name

What it means

Every DNS record has a name (also called host, label or subdomain) and a value. Receivers look for email records at exact names:

• SPF: the domain itself, yourdomain.com
• DMARC: _dmarc.yourdomain.com
• DKIM: selector._domainkey.yourdomain.com, where the selector is given by your provider (for example google or selector1)

Most DNS providers automatically add your domain to what you type in the name field. If you type the full name, the domain is added twice.

Why it matters

A record at the wrong name is invisible to receivers. Your DNS panel shows it, so you think everything is fine, but tests say "no DMARC record" or "DKIM key not found".

How to check

• Use the Domain scanner at /domain-scanner: if it does not find a record you just created, the name is a likely cause.
• Send a test email from the home page: the report shows which DKIM selector and domain were looked up.
• Look up the doubled name yourself:

  dig TXT _dmarc.yourdomain.com.yourdomain.com

  If this returns your record, you found the problem.

How to fix it

1. Open your DNS provider and look at how existing records are displayed. If the list shows short names like www or mail, the panel adds the domain for you.
2. Edit the record's name. Keep only the part before your domain.
3. Delete any duplicate left at the wrong place, so you do not get confused later.

What to type in the name field

Record   Type in a panel that adds the domain   Full name
SPF      @  (or leave empty)                    yourdomain.com
DMARC    _dmarc                                 _dmarc.yourdomain.com
DKIM     google._domainkey                      google._domainkey.yourdomain.com

Special cases

• The @ sign means "the domain itself". Some panels want @, others an empty field. Do not type @yourdomain.com.
• The final dot. In some panels and in zone files, a name ending with a dot (_dmarc.yourdomain.com.) is complete and nothing is added. Without the dot, the domain is added.
• Subdomains. For DMARC on news.yourdomain.com, the name is _dmarc.news.
• Wrong domain. If you own several domains, check that you are editing the one you send from.
• Wrong type. SPF and DMARC are TXT records. DKIM is TXT, or CNAME when your provider says so (Microsoft 365 uses CNAMEs).
• Extra quotes or spaces copied with the value can also break the record. Paste the value exactly as your provider gives it.

Check that it is fixed

Wait a few minutes, then run the Domain scanner again: the record should now be found. Send a new test email from the Delivmail home page to confirm that SPF, DKIM and DMARC pass.