About the DMARC Record Generator
Writing a DMARC record by hand means remembering tag names, order and syntax. This DMARC record generator builds it from simple choices: policy (none, quarantine or reject), subdomain policy, percentage of mail the policy applies to, relaxed or strict alignment for SPF and DKIM, and addresses for aggregate and failure reports.
It also suggests a staged rollout. Start at p=none with reports turned on, check that every legitimate service passes, then move to quarantine, possibly at a lower percentage, and finally to reject. Jumping straight to reject can block real mail from a service you forgot. The record is generated in your browser; publish it as a TXT record at _dmarc on your domain.
How to use it
- Choose a policy and subdomain policy.
- Set percentage and alignment modes.
- Add a monitored email address for aggregate reports.
- Publish the TXT record at _dmarc.yourdomain and follow the rollout stages.
Frequently asked questions
What is a good starting DMARC record?
A common start is v=DMARC1; p=none; rua=mailto:you@yourdomain. It collects reports without affecting delivery. Once reports show your legitimate senders pass SPF or DKIM with alignment, tighten the policy step by step. Reports usually arrive as XML files, so a DMARC report viewer or service makes them much easier to read and act on.
Where do I publish the DMARC record?
Add a TXT record with the host name _dmarc on your domain, for example _dmarc.example.com, at your DNS provider. There should be only one DMARC record per domain. If one already exists, edit it rather than adding another. Changes can take a while to appear depending on the record's TTL, so check again later with the DMARC checker.
Can I send DMARC reports to another domain?
Yes, but the receiving domain must publish a record authorising it to accept reports for your domain. Many DMARC reporting services handle this for you; otherwise, use an address on your own domain. Check the provider's setup instructions before publishing the new record.