No Login Data Private Local Save

DMARC Record Generator - Online Email Policy Builder

9
0
0
0
DMARC Record Builder

Fill in the fields below to construct your DMARC policy record.

Percentage of failing messages to apply policy (1-100).
mailto:
Address to receive daily aggregate XML reports.
mailto:
Address for individual forensic failure reports.
Default: 86400 (24 hours).
Generated DMARC Record
Publish this TXT record at _dmarc.yourdomain.com

Frequently Asked Questions

What is a DMARC record?

DMARC (Domain-based Message Authentication, Reporting & Conformance) is an email authentication protocol that builds on SPF and DKIM. A DMARC record is a DNS TXT record that tells receiving mail servers how to handle emails that fail authentication.

Why do I need DMARC?

DMARC protects your domain from spoofing, phishing, and unauthorized use. It also provides reports that give visibility into who is sending email on behalf of your domain, helping you monitor and improve email deliverability.

What does the "policy" (p) tag mean?

none: No action, monitoring only. quarantine: Mark failed emails as spam. reject: Block delivery entirely. Start with none and move to reject after analyzing reports.

What is the difference between rua and ruf?

rua sends aggregate XML reports daily showing all authentication results. ruf sends detailed forensic reports on individual failures (may contain sensitive content). Both are optional.

How do alignment modes (adkim/aspf) work?

Relaxed (r) allows partial domain matches (e.g., subdomain). Strict (s) requires exact domain match between the header from address and DKIM signing domain / SPF envelope domain. Relaxed is usually sufficient.

What does pct (percentage) do?

The pct tag applies the policy only to a percentage of failing messages (1-100). Useful for gradual rollout. Default is 100.

What is the subdomain policy (sp)?

If you want subdomains to have a different policy than the main domain, you can specify it using sp. If not set, the main policy applies to all subdomains.

How do I publish the generated record?

Create a TXT record in your DNS with the hostname _dmarc.yourdomain.com (replace yourdomain.com). The value is the string generated by this tool.

🔧 Related Tools