DMARC Record Generator

Create a properly formatted DMARC DNS record with our easy-to-use generator.

Before You Start

  • • Ensure SPF and/or DKIM are already configured
  • • Start with policy "none" to monitor before enforcing
  • • Set up an email address to receive DMARC reports
  • • Test your record before publishing to DNS

Configuration

Start with "none" to monitor for 2-4 weeks before enforcing

Daily aggregate reports of authentication results

Individual failure reports (optional, can be high volume)

Percentage of emails to apply policy to (1-100, default: 100)

Policy for subdomains (defaults to main policy if not specified)

Advanced Settings

Your DMARC Record

DNS Record:

v=DMARC1; p=none

DNS Setup Instructions:

  1. Log in to your DNS provider
  2. Create a new TXT record
  3. Set hostname to: _dmarc
  4. Paste the record value above
  5. Save and wait for DNS propagation (up to 48 hours)

Next Steps:

  • Publish this record to your DNS
  • Wait 24-48 hours for propagation
  • Verify with our DMARC Checker
  • Monitor reports for 2-4 weeks
  • Gradually strengthen policy as needed

Policy Deployment Strategy

1

Start: p=none

Monitor email authentication for 2-4 weeks without affecting delivery. Review reports to identify all legitimate email sources.

2

Next: p=quarantine

Failed emails go to spam folders. Monitor deliverability and ensure no legitimate emails are quarantined.

3

Final: p=reject

Failed emails are completely blocked. This is the strongest protection but requires confidence in your setup.