DMARC Record Generator
Build a correct DMARC record in a few clicks, then copy it into your DNS.
Free, no account needed.
The settings, in plain terms
- Policy (p=): none only reports, quarantine sends failing mail to spam, reject blocks it.
- Subdomain policy (sp=): the policy for subdomains, if it should differ.
- Percentage (pct=): apply the policy to part of your mail while you roll it out.
- Aggregate reports (rua=): where daily reports go. This is what you need to see who sends as your domain.
- Alignment (adkim=, aspf=): relaxed allows subdomains to match; strict requires an exact match.
Publishing the record
Create a TXT record with the name _dmarc (your DNS provider may show it as _dmarc.yourdomain.com) and paste the generated value. There must be only one DMARC record, so edit the existing one if there is one already.
Frequently asked questions
Which policy should I choose?
Start with p=none and a report address. Move to quarantine and then reject once reports show all of your legitimate mail passing.
Related tools
- DMARC CheckerLook up a domain's DMARC record and see exactly what it does: the policy, where reports go, and what to fix.
- DMARC Report AnalyzerDMARC reports are XML files most people never read. dmarcful turns them into a clear picture of everyone sending email as your domain, and tells you what to fix.
- What is DMARC?DMARC is a DNS record that tells mail servers what to do with email that claims to be from your domain but can't prove it. Here's how it works and how to set it up safely.