--- title: "Wix DMARC setup" description: "Wix DMARC setup: authenticate your Email Marketing domain, publish Wix-generated CNAME records, and validate the public DMARC record after DNS propagates." canonical: https://www.palisade.email/learning/wix-dmarc-setup last-updated: 2026-11-10 --- # Wix DMARC setup > Wix DMARC setup: authenticate your Email Marketing domain, publish Wix-generated CNAME records, and validate the public DMARC record after DNS propagates. Wix DMARC setup for Wix Email Marketing starts by authenticating the custom domain used as your sender address. Confirm the sender email, select "Authenticate this domain," then publish every account-generated CNAME record in the domain's DNS provider. Wix states that its "CNAME 5" record automatically sets up DMARC for the custom domain, but Wix does not publish a universal DMARC TXT record or policy for this workflow. ## Quick takeaways - Wix Email Marketing generates the CNAME records after you confirm a sender address and start domain authentication. - Copy every Wix-generated CNAME record exactly as shown for your account. - Wix says "CNAME 5" automatically sets up the custom domain's DMARC record. - Some DNS providers require only the host portion, rather than the full hostname, in the record-name field. - Allow up to 24 hours for DNS propagation and refresh Sender Details to check authentication status. - A public DMARC lookup confirms the visible DNS result, but it cannot prove that every Wix campaign or future message will authenticate. ## Scope and prerequisites This procedure applies to a custom domain used with Wix Email Marketing. It does not document standalone DMARC configuration for Wix Business Email, Google Workspace purchased through Wix, or another email service connected to the same domain. Before making DNS changes, identify the sending domain, its authoritative DNS provider, the Wix Email Marketing account owner, and the person authorized to edit the DNS zone. You also need access to the sender email inbox because Wix requires the sender address to be confirmed before domain authentication can begin. DMARC evaluates whether the visible From domain aligns with a passing SPF or DKIM identifier. Read the [DMARC setup guide](/dmarc-setup) for the wider protocol and policy rollout process, and see [what DMARC is](/learning/what-is-dmarc) for the underlying authentication model. Record the current DNS entries before adding Wix records. The rollback condition is clear: if a record conflicts with an existing entry, do not replace the existing record until the DNS owner confirms which service depends on it. A copied CNAME can affect another sender if it is placed at the wrong hostname. ## Choose the implementation approach Use Wix's generated records for Wix Email Marketing. Do not create a guessed TXT record, infer a DMARC policy from another Wix account, or replace existing SPF and DMARC records with values intended for another sender. The implementation path depends on where DNS is hosted: - If the domain uses an external DNS provider, copy the CNAME records from Wix into that provider's DNS settings. - If the DNS interface automatically appends your domain name, enter only the host portion Wix specifies. Wix gives examples such as `s1._domainkey` and `sg`. - If the DNS provider accepts fully qualified names, use the exact format required by that provider and compare the resulting record owner with Wix's instruction. - If Wix already shows the domain as authenticated, inspect the current status before publishing duplicate records. Wix's authentication page states that a list of CNAME records opens during the workflow. Those values are tenant-generated. They can differ by account and must be copied from the current Wix screen rather than from an example, another domain, or an old support ticket. > Do not remove an existing SPF, DKIM, or DMARC record to make room for a Wix entry. DNS changes should preserve records used by other production sending paths unless their owner has approved a coordinated replacement. ![Illustrative flow showing Wix Email Marketing sender confirmation, generated CNAME records, DNS publication, authentication status, and DMARC lookup](/images/editorial/wix-dmarc-setup/wix-dmarc-setup-authentication-flow.webp "1200x676") *Source: Palisade.* ## How to configure Wix Email Marketing authentication ### 1. Open the sender-management screen In Wix Email Marketing, open the Email Marketing dashboard, select Sender Details, then choose "Manage Senders." Wix documents this path in its [custom-domain authentication instructions](https://support.wix.com/en/article/email-marketing-authenticating-your-custom-email-domain). Add the sender name and reply-to email address if the address is not already listed. Use a mailbox that your team controls because Wix sends a confirmation message to that address. ### 2. Confirm the sender email address Open the confirmation message sent by Wix and complete the email-address confirmation. Return to Sender Details after confirmation. A sender address can be confirmed while its domain still shows "Not authenticated." Email confirmation proves control of the mailbox. It does not publish DNS records or prove that the domain has completed Wix authentication. ### 3. Start custom-domain authentication Find the sender domain that shows "Not authenticated" and select "Authenticate this domain." Wix then opens the account-specific DNS instructions. Wix says that "A list of CNAME records opens." Keep this screen open while editing DNS. Record type, host, target, and any verification labels must remain paired. Do not combine values from separate rows. ### 4. Copy all generated CNAME records to DNS Open the DNS zone for the sending domain at its authoritative DNS provider. Create every CNAME record Wix displays, using the generated host and target values exactly. The following shape is illustrative only. Do not publish these example values. Wix generates the real hostnames and targets in your account. ```text CNAME ``` If your provider hosts the `yourdomain.com` zone and Wix gives a host such as `s1._domainkey.yourdomain.com`, the provider may expect only: ```text s1._domainkey CNAME ``` Check the DNS provider's preview or saved record owner. A provider that appends the zone automatically can turn a full hostname into an unintended duplicated name, such as `s1._domainkey.yourdomain.com.yourdomain.com`. Copy all records Wix supplies. Wix specifically states that "CNAME 5" automatically sets up the custom domain's DMARC record. The support article does not disclose the resulting DMARC TXT syntax, reporting address, or policy, so this procedure cannot prescribe those values. ![What Wix documents about DMARC for Email Marketing, and what it does not publish](/images/editorial/wix-dmarc-setup/wix-dmarc-setup-documented-vs-not.webp "1200x442") *Source: Palisade, from Wix help documentation.* ### 5. Wait for DNS propagation and refresh Wix Wix says propagation can take a few hours and advises users to allow up to 24 hours. After waiting for the authoritative DNS zone to return the new records, refresh the Email Marketing Sender Details page and inspect the domain status. A Wix authenticated status is evidence that Wix can see the configuration it expects. It is not evidence that a recipient has received a new production message from the exact Wix campaign path. ## How to validate the setup Validate the Wix configuration at four separate layers. - DNS: Query the record owners supplied by Wix from the authoritative DNS service and a public resolver. Confirm that each expected CNAME resolves to the account-generated target. Google's [Public DNS documentation](https://developers.google.com/speed/public-dns/docs/using) explains how to query public DNS results. - Wix status: Refresh Sender Details and confirm the sending domain no longer shows "Not authenticated." - Message: Send a new test campaign through Wix Email Marketing to a mailbox you control. Inspect the delivered message headers for receiver authentication results. [RFC 8601 defines the Authentication-Results header field](https://datatracker.ietf.org/doc/html/rfc8601), but a public DNS result alone does not show the authentication outcome of a delivered message. - DMARC reporting: Once aggregate-report data accumulates, review whether Wix Email Marketing traffic is passing and aligning for the visible From domain. This is the layer that can reveal patterns across production mail rather than one test message. Use a simple acceptance record for each test: ```yaml sending_domain: yourdomain.com wix_sender_status: authenticated dns_records: all generated CNAME records resolve test_message: delivered through Wix Email Marketing authentication_results: captured from recipient message headers dmarc_report_result: pending or observed checked_at: 2026-11-05T14:00:00Z ``` A DNS check can help inspect the published result after Wix authentication. It cannot validate Wix's private account relationship, prove that a particular campaign used the expected sender path, or predict inbox placement. ## Troubleshooting ### Wix still shows "Not authenticated" First, confirm that the sender email itself was confirmed. Then compare every CNAME record in DNS with the current Wix-generated list, including the record type, host, and target. Check whether the DNS provider expects the short host form or the full hostname. If the saved DNS owner contains the domain twice, correct the owner name and wait for propagation again. ### The CNAME records resolve, but Wix has not updated Wix advises allowing up to 24 hours for propagation. Query the authoritative DNS zone first, then compare its answer with a public resolver. If the authoritative answer is missing or differs from Wix's current value, correct the DNS record before treating the delay as a Wix-side issue. If DNS answers match Wix's generated records after the propagation window, refresh Sender Details and compare the domain and account carefully. A record copied from another Wix account cannot authenticate the current account. ### A campaign sends from a Wix domain instead of the custom domain Wix states that when an Email Marketing domain is not authenticated, it automatically adds an authenticated Wix domain, such as `wixemails.com`, to help deliverability. Check the sender's authentication status and complete the custom-domain DNS flow before assessing DMARC behavior for the intended From domain. ### The DMARC lookup does not show what you expected A DMARC lookup reads public DNS. Wix documents that its "CNAME 5" sets up DMARC, but it does not document the resulting DMARC record format. Compare the lookup result with Wix authentication status and a new delivered message instead of editing DMARC tags based on an assumption. ## Check the published DMARC result after Wix authentication After Wix reports the sender domain as authenticated, use the [Palisade DMARC checker](/tools/dmarc) to inspect the public DMARC result for the custom domain. Compare that lookup with the Wix sender status and the authentication results from a real Wix Email Marketing test message. [Check the published DMARC record](/tools/dmarc) A public record check cannot prove that Wix authenticated your account, repair a missing CNAME record, monitor every future campaign, or determine a receiver's private inbox decision. If Wix Email Marketing is one of several sources sending as the same domain, one successful setup does not inventory the other sources or show whether they align over time. [Start with Palisade](https://app.palisade.email/signup?utm_source=palisade_learning&utm_medium=article&utm_campaign=vendor_setup&utm_content=wix-dmarc-setup) when your team needs to analyze DMARC aggregate-report data, identify sending sources and alignment issues, and review prioritized remediation work. Palisade proposes evidence-based next steps, while your team reviews the evidence and applies DNS or DMARC policy changes. ## Sources and further reading - [Wix: Authenticating your custom email domain](https://support.wix.com/en/article/email-marketing-authenticating-your-custom-email-domain) - [Wix: Increasing mail deliverability](https://support.wix.com/en/article/increasing-your-mail-deliverability) - [Google Public DNS: Using Google Public DNS](https://developers.google.com/speed/public-dns/docs/using) - [RFC 8601: Authentication-Results header field](https://datatracker.ietf.org/doc/html/rfc8601) - [Palisade DMARC checker](/tools/dmarc) ## Frequently asked questions ### How do I set up DMARC on Wix? For Wix Email Marketing, confirm the sender address, select "Authenticate this domain," and publish the account-generated CNAME records in DNS. Wix states that "CNAME 5" automatically sets up DMARC for the custom domain. ### How do I set up DMARC correctly? Not from a universal Wix record template. Wix documents its Email Marketing authentication workflow but does not publish the resulting DMARC TXT syntax, tag values, or policy. Use the CNAME records generated in the Wix account, then validate DNS, Wix status, a delivered message, and later DMARC reporting. ### What should my DMARC be set to? Not to a policy value guessed from this Wix workflow. Wix says that high-volume Wix Business Email senders should use DMARC alongside SPF and DKIM, but its documentation does not prescribe a universal DMARC policy or tag set. ### How do I authenticate email on Wix? For Wix Email Marketing, add a sender name and reply-to address, confirm the sender email, select "Authenticate this domain," and copy the generated CNAME records into DNS. Refresh Sender Details after DNS propagation to check the domain status. ### Does a Wix authenticated status prove that DMARC passes? No. A Wix authenticated status shows that Wix recognizes the expected domain configuration. Send a new Wix Email Marketing message and inspect its receiver-added authentication results, then review aggregate reports after production mail has accumulated.