DMARC generator
Create a DMARC record by choosing a policy and a reporting address.
Used to display the record's full name.
What the recipient should do with email that fails SPF or DKIM.
The percentage of failing email to which the policy applies. Default is 100.
Recommended. You will receive one report per day from each major recipient.
Few recipients send these reports. Leave blank if you are unsure.
Your DMARC record
- Type
- TXT
- Name
- _dmarc
- Value
- v=DMARC1; p=none
About this tool
The generator builds the DMARC record from your choices and shows you the name and value to add as a TXT record in DNS. Everything runs in your browser.
If you don't have DMARC yet: start with the none policy and enter an address for reports. The reports will show which servers are sending email on your domain's behalf and whether they pass SPF and DKIM.
Once the reports show that all legitimate email is passing, switch to quarantine, then to reject. You can use pct to roll out the new policy to a portion of email first.
Frequently asked questions
What name should the record have?
_dmarc — so _dmarc.example.com. In most DNS tools you just type _dmarc in the name field.
Do I need SPF and DKIM first?
Yes. DMARC builds on both of them. Without SPF or DKIM no email will pass the check, and with a quarantine or reject policy your own email would be blocked.
Where should the reports be sent?
An address you actually read — ideally a dedicated one such as dmarc@example.com. The reports are XML files, so many people use a service that processes and summarises them.