DMARC Record Generator - Create a DMARC Record
Pick a policy, add a reporting address, and get a valid DMARC TXT record with the exact host name to use in your DNS, plus a rollout path from monitoring to full enforcement.
Advanced: alignment and failure options
Your DMARC record
- Type
- TXT
- Host
- _dmarc
- TTL
- 3600
v=DMARC1; p=none
No aggregate report address
Add rua so you can see who sends as your domain before enforcing.
Monitoring mode
Good starting point. Move to quarantine/reject once reports look clean.
Recommended DMARC Records
1. Start monitoring
v=DMARC1; p=none; rua=mailto:dmarc@example.com
2. Begin enforcement gradually
v=DMARC1; p=quarantine; pct=25; rua=mailto:dmarc@example.com
3. Full protection
v=DMARC1; p=reject; rua=mailto:dmarc@example.com
Domains that never send email
v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s, combined with an SPF record of v=spf1 -all.
Before enforcing, check that your SPF record and DKIM keys are valid. Once published, confirm the result with the DMARC checker.
DMARC Generator FAQ
Where do I add the DMARC record?
Create a TXT record in your domain's DNS with the host _dmarc (some providers want the full name, _dmarc.example.com) and paste the generated value. Only one DMARC record may exist per domain.
Which DMARC policy should I start with?
Start with p=none and an rua reporting address. It changes nothing for delivery but shows you every source sending as your domain. After fixing SPF and DKIM for your legitimate senders, move to quarantine and then reject.
Do I need SPF and DKIM before adding DMARC?
DMARC works on top of them: a message passes DMARC when SPF or DKIM passes and aligns with the From domain. You can publish p=none first to discover what's missing, but don't enforce quarantine or reject until SPF and DKIM are in place for all legitimate mail.
What email address should I use for rua?
A mailbox you control that can handle a steady stream of XML attachments, or the address given by a DMARC reporting service, which turns the reports into readable dashboards. Large domains receive hundreds of reports a day.
Is DMARC required for Gmail and Yahoo?
Since February 2024, Gmail and Yahoo require anyone sending more than 5,000 messages a day to publish a DMARC record (p=none is accepted), along with SPF, DKIM and one-click unsubscribe for marketing mail.
More Free Email Tools
MX Lookup
Find the mail servers for a domain, their priority, IPs and email provider
SPF Record Checker
Validate an SPF record, count DNS lookups and expand every include
SPF Record Generator
Build a valid SPF record for Google Workspace, Microsoft 365, SES and more
DMARC Record Checker
Look up and explain a domain's DMARC policy, reporting and alignment
DKIM Record Checker
Check a DKIM selector, read the public key and its length, or scan common selectors
SMTP Test Tool
Open a live SMTP session, test TLS and authentication, and send a test email