Skip to content

Free tool · no sign-up

DMARC record generator

Short answerThe DMARC generator builds a valid DMARC TXT record from a few choices: the policy for failing mail, an optional subdomain policy, report addresses and alignment. Publish it at _dmarc.yourdomain.

Separate several addresses with commas.
Alignment

Host

_dmarc

TXT value

    After publishing, verify it with the DMARC checker.

    Lookups run in your browser through public DNS-over-HTTPS resolvers (Cloudflare, then Google). We don't store what you check. Privacy

    How to use it

    Reading the result

    1. 1

      Choose a policy

      Start with none if you have never had DMARC, so you can read reports first.

    2. 2

      Add a report address

      Use a mailbox or a DMARC reporting service that can handle daily XML reports.

    3. 3

      Copy the record

      Create a TXT record with the host _dmarc and the generated value at your DNS host.

    4. 4

      Verify it

      Run the DMARC checker a few minutes after publishing.

    DMARC record
    A DMARC record is a TXT record published at _dmarc.yourdomain, for example v=DMARC1; p=quarantine; rua=mailto:reports@yourdomain.com. It sets a policy for mail that fails authentication and an address for reports. More about DMARC record

    FAQ

    DMARC generator questions

    Which DMARC policy should I start with?

    p=none with a rua address, for two to four weeks. Then move to p=quarantine, and to p=reject once reports show every legitimate sender passes.

    Where do I publish the DMARC record?

    As a TXT record on the host _dmarc of your domain. In most DNS panels you enter _dmarc as the name; some need the full _dmarc.yourdomain.com.

    Should I use strict alignment?

    Relaxed alignment (the default) works for most setups and allows subdomains. Use strict only if every sender signs with exactly your from-domain.

    Go deeper: SPF, DKIM and DMARC explained. Fix it for good with deliverability monitoring.