DMARC record generator.
Build a valid DMARC record from a few choices — policy, alignment, and where reports go — and get a copy-ready TXT record to publish at _dmarc.yourdomain. It assembles the record live in your browser using only real DMARC tags. No account, no card.
Share of failing mail the policy is applied to (1–100). Left at 100 it's the default, so the pct tag is omitted.
Where the daily aggregate (XML) reports are sent. Recommended, even at p=none.
Optional per-message failure reports. Many receivers no longer send these for privacy reasons.
v=DMARC1; p=none;Publish this as a TXT record with the host / name _dmarc.yourdomain.com at your DNS provider. Changes can take up to a day to propagate.
Start safe: begin at p=none with a rua address so you collect aggregate reports and confirm your legitimate mail passes — then move to quarantine and finally reject once the reports look clean.
How to use the record you generate
DMARC only works once SPF and DKIM are already in place — it's the policy layer that ties them together. The guide to SPF, DKIM, and DMARC explains how the three fit together, and how to set up DMARC walks through publishing and reading reports step by step.
- Start by monitoring, not blocking
- Publish at p=none with a rua address first. You get aggregate reports without any risk of blocking real mail while you find every legitimate sender.
- Tighten to quarantine, then reject
- Once the reports show your real mail passing SPF or DKIM in alignment, move to quarantine and then reject to actually stop spoofing.
Why senders need an enforcing DMARC policy
Since 2024, Gmail and Yahoo require bulk senders to publish DMARC and authenticate with aligned SPF or DKIM — the Google and Yahoo sender requirements spell out the full list. A published record is table stakes; enforcement is what stops others from spoofing your domain. Once your authentication is solid, deliverability comes down to reputation and sending to a clean, verified list.
DMARC record generator — FAQ
Authenticated — now send to a clean list
DMARC proves your mail is genuine; verifying your list keeps bounces and spam traps from undoing that work. Start free with 100 credits, no card required.