Free Tool

DMARC Record Generator

Build a valid DMARC record to stop spoofing, improve deliverability and get reports on who sends email from your domain.

Policy p

What receivers should do with mail that fails checks

none — Monitor only

Take no action, just collect reports. Start here.

quarantine — Send to spam

Failing mail lands in the spam/junk folder.

reject — Block completely (strongest)

Failing mail is rejected outright. Use once confident.

Reporting addresses

Where DMARC reports should be sent

Aggregate reports (rua) (recommended) Daily summary of authentication results. Essential for monitoring.

Forensic reports (ruf) (optional) Detailed per-message failure reports. Rarely supported today.

Advanced options

Percentage, subdomains and alignment

Percentage applied (pct) Share of failing messages the policy is applied to. Ramp up gradually.

Subdomain policy (sp)

DKIM alignment (adkim)

SPF alignment (aspf)

Your DMARC record

Live preview — updates as you type

Record type TXT

Host / Name _dmarc

Create a TXT record at the host _dmarc.yourdomain.com (many panels only need "_dmarc" as the name).

Verify the record with the DNS Lookup tool

How to add this record?

1 Log in to your DNS provider (registrar or hosting panel).
2 Add a new TXT record with host _dmarc.
3 Paste the generated record as the value and save.
4 Start with p=none, watch the reports, then tighten the policy.

DMARC explained in plain language

Understand how DMARC protects your domain and your recipients.

What is DMARC?

DMARC (Domain-based Message Authentication, Reporting and Conformance) builds on SPF and DKIM. It tells receiving servers what to do with mail that fails authentication and sends you reports about it.

Start with p=none

Never jump straight to reject. Deploy with p=none first, read the aggregate reports for a few weeks, fix any legitimate senders, then move to quarantine and finally reject.

Where does it go?

The DMARC record is a single TXT record on the special host _dmarc.yourdomain.com. It applies to the whole domain, and the sp tag can set a different rule for subdomains.

Read your reports

Set an rua address so you actually receive the daily aggregate reports. They are XML, so a DMARC report analyzer makes them readable and reveals who sends mail as you.

DMARC needs SPF to work

Make sure your domain has a valid SPF record too. Generate one in seconds.

Open the SPF Generator

Other free SEO tools

Check other tools for analyzing your website