DMARC Record Generator
Build a DMARC policy record with reporting and alignment options.
DMARC record — _dmarc TXT
Publish this as a TXT record at _dmarc.yourdomain.com.
Frequently asked questions
What is a DMARC record?
DMARC builds on SPF and DKIM: it tells receivers what to do when a message fails authentication and where to send reports. It is published as a TXT record at _dmarc.yourdomain.com.
Which policy should I start with?
Start with p=none to monitor and collect reports without affecting delivery. Once you confirm legitimate mail passes, move to p=quarantine and finally p=reject for full protection.
What are rua and ruf?
rua is the address that receives aggregate (summary) reports, and ruf receives forensic (per-message) reports. Aggregate reports are the ones most people use to see who is sending as their domain.
What does pct do?
pct applies your policy to only a percentage of failing mail, which is useful for a gradual rollout. Leave it at 100 for full enforcement.
What is alignment (adkim / aspf)?
Alignment controls how strictly the authenticated domain must match your From domain. relaxed allows subdomains, strict requires an exact match. relaxed is the common default.
Do I need SPF and DKIM too?
Yes. DMARC only passes when SPF or DKIM passes and is aligned with your From domain, so you should have those set up first.