Free DMARC Record Generator

Build a valid DMARC TXT record in seconds. Set your policy, reporting address, alignment and rollout percentage, then copy it straight into your DNS. No signup required.

Start at none, then tighten to quarantine and reject as you gain confidence.

Optional separate policy for subdomains.

Where DMARC XML reports are sent. Comma-separate multiple.

Optional. Few providers send these.

Share of mail the policy applies to. Useful for staged rollout.

Your DMARC record
v=DMARC1; p=none
Host / name_dmarc
TypeTXT

Publish this as a TXT record at _dmarc.yourdomain.com. Allow a few hours for DNS to propagate, then verify it.

How to roll out DMARC safely

  1. Publish the record with p=none and a reporting address.
  2. Read the aggregate reports to find every legitimate source sending as your domain.
  3. Fix SPF and DKIM for those sources until they align and pass.
  4. Tighten the policy to quarantine, then reject.

Frequently Asked Questions

What is a DMARC record?

A DMARC record is a TXT record published at _dmarc.yourdomain.com that tells receiving mail servers what to do with messages that fail SPF and DKIM alignment, and where to send reports about your email traffic.

What DMARC policy should I start with?

Start with p=none. It enforces nothing but sends you aggregate reports so you can see who is sending mail as your domain. Once your legitimate sources pass, move to quarantine and then reject.

Where do I publish the DMARC record?

Create a TXT record with the host _dmarc (so the full name is _dmarc.yourdomain.com) and paste the generated value. Most DNS providers accept it within a few minutes to a few hours.

Do I need SPF and DKIM as well?

Yes. DMARC builds on SPF and DKIM. You should have at least one of them aligned and passing before moving to an enforcing DMARC policy, or you risk blocking your own mail.

Related free tools

DMARC Checker

Validate an existing DMARC record and see how it is configured.

SPF Record Generator

Build a valid SPF record for your sending sources.

SPF Checker

Check an existing SPF record for errors and lookup limits.

DKIM Checker

Verify your DKIM selector and public key.

Email Security Checker

Run SPF, DKIM and DMARC checks together in one report.

MX Lookup

Look up the mail servers for any domain.