DMARC Record Generator
Create a DMARC record with the right policy, reporting addresses and alignment settings. Start with p=none to collect reports, then ratchet up to p=reject.
Frequently asked questions
How do I create a DMARC record?
Pick a policy, add an address for aggregate reports (rua) and press Generate DMARC record. The generator writes the TXT value; publish it at _dmarc.yourdomain.com. Start with p=none so nothing is blocked while you read the reports.
Which DMARC policy should I start with?
p=none. It changes nothing for delivery but makes receivers send you daily aggregate reports. Once those show every legitimate sender passing SPF or DKIM with alignment, move to p=quarantine, then p=reject. Gmail and Yahoo require at least p=none for bulk senders.
What is the rua address in a DMARC record?
The mailbox that receives aggregate (rua) reports: one XML file per receiver per day, listing every IP that sent as your domain and whether it aligned. Use a dedicated address; read the files with the DMARC Report Analyzer.
What is the difference between relaxed and strict alignment?
Relaxed (r, the default) lets a subdomain match: mail signed by news.example.com aligns with From: example.com. Strict (s) needs an exact domain match. Keep relaxed unless you have a reason; strict breaks many ESP setups.
Where do I publish the DMARC record?
As a TXT record at the name _dmarc under your domain (host _dmarc at most DNS providers). One record only. Check it afterwards with the DMARC Checker.