DMARC Record Generator
Configure your DMARC policy options and instantly get the DNS TXT record string ready to publish at _dmarc.yourdomain.com.
DMARC Policy Options
100
%
Separate multiple addresses with commas.
Generated TXT Record
How to Publish
- Log in to your DNS provider (Cloudflare, Route 53, GoDaddy, etc.).
- Add a new TXT record.
- Set the Name / Host to
_dmarc(or_dmarc.yourdomain.com). - Paste the generated value above into the Value / Content field.
- Save. DNS changes can take up to 48 hours to propagate.
Tag Reference
| Tag | Required | Description |
|---|---|---|
| v= | Yes | Protocol version — always DMARC1 |
| p= | Yes | Policy: none / quarantine / reject |
| sp= | No | Subdomain policy (inherits p= if omitted) |
| pct= | No | % of mail the policy applies to (default 100) |
| rua= | No | Aggregate report recipients (recommended) |
| ruf= | No | Forensic report recipients |
| adkim= | No | DKIM alignment: r (relaxed) / s (strict) |
| aspf= | No | SPF alignment: r (relaxed) / s (strict) |
| fo= | No | Failure reporting options: 0, 1, d, s |
Record copied!
Summary
Configure your DMARC policy options and instantly get the DNS TXT record string ready to publish at _dmarc.yourdomain.com.
How it works
- Select your main policy (none, quarantine, or reject) from the Policy dropdown.
- Enter one or more aggregate report email addresses (rua=) to receive daily DMARC reports.
- Optionally enter forensic report addresses (ruf=) and adjust the percentage (pct=).
- Set subdomain policy, DKIM alignment, and SPF alignment as needed.
- The generated TXT record updates live — click Copy to copy it to your clipboard.
- Publish the record as a DNS TXT entry at _dmarc.yourdomain.com with your DNS provider.
Use cases
- Protect your domain from email spoofing and phishing abuse.
- Gradually enforce email authentication by starting with p=none for monitoring.
- Receive aggregate DMARC reports to diagnose legitimate mail authentication failures.
- Generate a record for a subdomain with a different policy than the root domain.
- Ensure compliance with Google/Yahoo 2024 sender requirements that mandate DMARC.
- Quickly build a reject policy for domains that should never send email.
- Audit alignment mode (strict vs relaxed) for DKIM and SPF headers.
- Teach email authentication concepts with an interactive, real-output builder.
Frequently Asked Questions
Last updated: 2026-06-09 ·
Reviewed by Nham Vu