DMARC Record Generator

Domain-based Message Authentication, Reporting & Conformance (DMARC) is an email authentication protocol that tells receiving mail servers how to handle email that fails SPF or DKIM checks. It is published as a DNS TXT record at _dmarc.yourdomain.com and works alongside SPF and DKIM to provide comprehensive email authentication.

A DMARC record specifies the policy (p=none, p=quarantine, or p=reject), where to send reports (RUA for aggregate, RUF for forensic), alignment requirements for DKIM and SPF, and optional parameters like percentage (pct) and subdomain policy (sp). The recommended starting point is p=none (monitoring) to gather data, then gradually tighten to p=quarantine and finally p=reject.

DMARC helps prevent email spoofing, phishing, and domain impersonation. Major email providers like Gmail, Yahoo, and Microsoft use DMARC policies to decide whether to deliver, quarantine, or reject email that claims to be from your domain.

1. Enter your domain — Type the domain you want to protect.
2. Set your policy — Start with p=none to monitor without affecting delivery. Once you've verified SPF and DKIM work, move to p=quarantine then p=reject.
3. Configure reports — Enter email addresses for RUA and RUF to receive DMARC reports. Use a dedicated email address or a DMARC analysis service.
4. Adjust alignment — Use Relaxed (r) alignment for most setups. Strict (s) requires an exact domain match for DKIM/SPF.
5. Copy and publish — Click Copy and add the TXT record to _dmarc.yourdomain.com in your DNS zone.