DMARC Record Generator
Build a valid DMARC record for your domain: choose a policy, where reports go and how strict the alignment is, then copy the TXT record into your DNS.
- Type
TXT- Name / host
_dmarc- Value
v=DMARC1; p=none
- Add a report address so you can see who sends mail as your domain before you tighten the policy.
- p=none only monitors. Move to quarantine and then reject once the reports look clean.
How it works
Rolling out DMARC safely
Start with p=none
Publish p=none with a report address and read the daily aggregate reports to find every service that sends mail for you.
Fix SPF and DKIM
Each legitimate sender needs aligned SPF or DKIM. Add missing senders to SPF and turn on DKIM signing in each service.
Tighten the policy
Move to quarantine, optionally with pct below 100, and finally to reject. Gmail and Yahoo require at least p=none for bulk senders.
FAQ
Frequently asked questions
Where do I add the record?
Add a TXT record named _dmarc at your DNS provider with the generated value. Most panels want just _dmarc as the name.
What is relaxed vs strict alignment?
Relaxed accepts subdomains of your domain (mail.example.com for example.com); strict requires an exact match. Relaxed is the usual choice.
More free tools
All toolsBusiness email on your domain