How to use DMARC Record Generator
The DMARC Record Generator creates a valid _dmarc TXT record from plain-language choices about how strictly you want to enforce email authentication and where you want reports sent. DMARC syntax is terse and easy to mistype, and a malformed record provides no protection at all, so generating it removes the risk. You choose a policy, set the reporting addresses, and optionally configure alignment and subdomain handling; the tool outputs the exact record to publish, helping you defend your domain against phishing and spoofing.
- Choose your enforcement policy: none, quarantine or reject.
- Enter the email address that should receive aggregate (rua) reports.
- Optionally set a forensic (ruf) address and alignment strictness.
- Copy the generated _dmarc TXT record.
- Publish it at _dmarc.yourdomain.com and confirm with a DMARC checker.
Your data never leaves your device — 100% private processing.
Start at none, finish at reject
The safest deployment begins with p=none, which enforces nothing but causes receivers to send you aggregate reports about who is mailing as your domain. After a week or two you can read those reports to confirm every legitimate sender passes SPF or DKIM with alignment, then raise the policy to quarantine and finally reject. This staged approach means you never block your own mail by accident. The generator defaults to a monitoring-friendly record and makes it easy to tighten later.
| Tag | Purpose |
|---|---|
| p | Policy: none, quarantine or reject |
| rua | Address for aggregate reports |
| ruf | Address for forensic reports |
| pct | Percentage of mail the policy applies to |
| adkim / aspf | DKIM/SPF alignment strictness |
Why reporting addresses matter
The rua address is the heart of a useful DMARC deployment because the daily aggregate reports it receives are how you discover legitimate senders you forgot to authorise and spot spoofing attempts in progress. Without a reporting address you are enforcing a policy blind, with no way to know whether it is helping or quietly blocking real mail. Many teams point rua at a dedicated mailbox or a DMARC analytics service that turns the raw XML into readable dashboards. Always set rua, even when starting at p=none.
Glossary
- DMARC
- A policy framework instructing receivers how to handle unauthenticated mail and where to report.
- p (policy)
- The DMARC tag setting the action for failing mail: none, quarantine or reject.
- rua
- The address that receives aggregate DMARC reports.
- pct
- The percentage of failing mail to which the policy is applied.
- Alignment
- The match required between the authenticated and visible From domains.
Related reading
Frequently Asked Questions
Why use DMARC Record Generator?
- Generate a valid DMARC TXT record from plain-language choices in seconds
- Set reporting addresses so aggregate data flows to your inbox or analytics service
- Choose the exact policy level and subdomain handling without editing raw text
- Produce a correctly formatted record that avoids syntax mistakes that nullify protection
Common use cases
- Create a monitoring-only p=none record when first protecting a domain from spoofing
- Generate a p=reject record after aggregate reports confirm all senders pass
- Set up DMARC reporting to a third-party analytics service by providing its rua address
- Publish a subdomain-blocking sp=reject policy for domains not used for mail
- Produce the _dmarc TXT record required by Google and Yahoo bulk-sender policies
Get weekly tool tips & updates
New tools, power-user tips, and productivity hacks — delivered free every Friday.
No spam, ever. Unsubscribe with one click.
Related Network & DNS
SPF Record Generator
Generate SPF DNS TXT records for your domain. Support for Google Workspace, Microsoft 365, SendGrid, Mailchimp, custom IPs and includes.
Subnet / CIDR Calculator
Calculate network address, broadcast address, usable IP range, and host count for any IPv4 subnet. Free CIDR calculator.
SPF Record Checker
Check the SPF (Sender Policy Framework) record for any domain. Validate your email authentication setup and spot misconfigurations instantly.
DKIM Record Lookup
Look up DKIM (DomainKeys Identified Mail) DNS records for any domain and selector. Verify your DKIM email authentication setup.
TXT Record Lookup
Look up TXT records for any domain. View SPF, DMARC, DKIM, and domain-verification TXT records instantly to debug email and ownership setup.
DNS Lookup Tool
Look up DNS records for any domain — A, AAAA, MX, NS, TXT, CNAME, SOA, and CAA records. Free, instant results pulled from authoritative nameservers.
Explore all Network & DNS.