DMARC Record Generator
Pick a policy, add the addresses that should receive reports, and set alignment. We build a valid v=DMARC1 record to publish at _dmarc.yourdomain.com.
Policy p
Reporting
Recommended. Comma-separate multiple addresses.
Alignment (optional)
Your DMARC record
Publish as a TXT record at _dmarc.yourdomain.com
v=DMARC1; p=none;
Safe rollout
Start at p=none with an rua address to collect reports without affecting delivery. Once the reports show all your legitimate mail passes, move to quarantine, then reject. Verify with the DMARC checker and the deliverability report.
What DMARC does
DMARC (Domain-based Message Authentication, Reporting and Conformance) tells receiving servers what to do when a message fails SPF and DKIM alignment, and where to send reports about your mail. It is published as a TXT record at _dmarc.yourdomain.com and it is the record that finally lets you stop others from spoofing your domain.
DMARC only acts when a message is not aligned - so you need working SPF and DKIM first. Alignment can be relaxed (the default, matching the organizational domain) or strict (an exact match). Begin in monitoring mode and tighten the policy as your reports confirm every legitimate source is authenticated.
Examples
- v=DMARC1; p=none; rua=mailto:dmarc@example.com - monitor and collect reports.
- v=DMARC1; p=reject; rua=mailto:dmarc@example.com; adkim=s; aspf=s - full enforcement, strict alignment.