DMARC record generator
Build a DMARC record with policy, subdomain policy, report addresses and alignment settings, ready to publish as a TXT record.
Runs in your browser · nothing is sentEmail securityNew
Build a DMARC record. Most domains start with p=none to collect reports before enforcing a policy.
Generated record
DNS name: _dmarc.example.com
Publish this as a TXT record at the name shown above.
How to use
- Enter your domain and choose a policy.
- Add a report address (rua) so you can see what the policy affects.
- Copy the record and publish it as a TXT record at the name shown.
Common scenarios
Check a few weeks of aggregate reports first, then raise the policy on this tool and republish.
Paste the generated record into the DMARC analyzer before publishing it.
DMARC analyzer →About this tool
Choose a policy, how much of your mail it should apply to, and where aggregate reports should go, and the tool builds a valid DMARC record for _dmarc.yourdomain. Most domains start with p=none to collect reports before enforcing quarantine or reject.
🔒 Your input stays in your browser and is never sent anywhere.
Frequently asked questions
Should I start with none, quarantine or reject?
Start with none and a report address. After a few weeks of reports showing your own mail passes SPF and DKIM, move to quarantine and then reject.
Do I need a subdomain policy?
Only if subdomains should be treated differently from the main domain. Leaving it on "same as policy" is usually what you want.
Can I test this before publishing?
Yes. Paste the generated record into the DMARC analyzer to see the same checks a mail server would run.
Found a problem or have a suggestion? Tell us