Add or Update a DMARC Record in Squarespace DNS for NTS DMARC Monitoring
Before You Start
Use this guide when Squarespace is hosting DNS for your domain and NTS has asked you to update DMARC for email security monitoring.
DMARC is published as a TXT record at the host name _dmarc. Your domain should have only one _dmarc TXT record.
Squarespace notes that domains registered or transferred through Squarespace may already have email security TXT records applied automatically, including DMARC. If a _dmarc record already exists, edit the existing record instead of adding another one.
If your domain is connected to Squarespace but DNS is hosted somewhere else, make this change at the authoritative DNS host instead of Squarespace.
Sign in to Squarespace with an account that can manage domains and DNS records.
Official Squarespace TXT record reference: https://support.squarespace.com/hc/en-us/articles/31120980444429-Adding-TXT-records
Record to Use
Replace the current _dmarc TXT value with the following NTS DMARC record:
v=DMARC1; p=reject; rua=mailto:dmarc@networkthinking.ai; ruf=mailto:dmarc@networkthinking.ai;Host: _dmarc
Type: TXT
Data or Value: paste the full record exactly as shown above, including the trailing semicolon.
Policy: p=reject tells receiving mail systems to reject messages that fail DMARC alignment. Confirm with NTS before applying this policy if you are unsure whether all legitimate email senders are already authenticated.
Open DNS Settings in Squarespace
Update the Existing _dmarc Record
If No _dmarc Record Exists
Note: Do not create a second _dmarc TXT record if one already exists. Squarespace's email DNS guidance states that you can only add one DMARC record to a Squarespace domain.
Verify the Change
DNS updates can take time to propagate. Squarespace commonly advises allowing up to 48 hours for DNS changes to fully update.
After saving, send a screenshot of the _dmarc TXT record to support@networkthinking.com or ask NTS to verify the record publicly.
The final DNS result should show one TXT record for _dmarc.yourdomain.com with this exact value:
v=DMARC1; p=reject; rua=mailto:dmarc@networkthinking.ai; ruf=mailto:dmarc@networkthinking.ai;Troubleshooting
If Squarespace does not show DNS settings, confirm whether the domain is managed by Squarespace or only connected to a Squarespace site.
If Squarespace reports a conflicting or duplicate DMARC record, search the Custom records and Email Security records for an existing _dmarc entry and edit that record instead.
If your domain uses nameservers at another DNS provider, make the DMARC change at that provider instead of Squarespace.
If you use a third-party email platform, marketing platform, CRM, or ticketing system to send mail as your domain, make sure SPF and DKIM are configured for those senders before enforcing p=reject.
For help, email support@networkthinking.com or open /remote-support.