Generate a DMARC record for your domain

Pick a policy, where reports go and how strict alignment is. Get the TXT record to publish at _dmarc, what every tag means, a staged rollout from p=none to p=reject, and a live read of the record you have now. Free, no account.

Failure report options (fo):

Example for example.com. Type your domain above.

DMARC record for example.com

Publish a TXT record at _dmarc.example.com with the value: v=DMARC1; p=none; rua=mailto:dmarc@example.com. This sets p=none, with reports to dmarc@example.com.

TypeTXT
Host / name_dmarc.example.com
Valuev=DMARC1; p=none; rua=mailto:dmarc@example.com

Staged rollout for example.com

StageRecordMove on when
1. Monitorv=DMARC1; p=none; rua=mailto:dmarc@example.comRead the aggregate reports for at least two to four weeks. List every service that sends as your domain and fix SPF and DKIM for each until real mail passes.
2. Quarantine a sharev=DMARC1; p=quarantine; pct=25; rua=mailto:dmarc@example.comFailing mail goes to spam for a quarter of messages. Raise pct to 50, then 100, while the reports stay clean.
3. Quarantine allv=DMARC1; p=quarantine; rua=mailto:dmarc@example.comHold here until reports show no real mail failing.
4. Rejectv=DMARC1; p=reject; rua=mailto:dmarc@example.comFailing mail is refused. Keep reading reports for new senders.

What each tag means

TagMeaning
vVersion. Always DMARC1, and always first.
pPolicy for mail that fails DMARC: none (report only), quarantine (spam folder) or reject (refuse it).
spPolicy for subdomains. Left out, subdomains follow p.
pctShare of failing mail the policy applies to, 1 to 100. Left out, it is 100. Useful for stepping up quarantine or reject gradually.
ruaWhere receivers send daily aggregate reports (counts by sending IP and result). One or more mailto: addresses.
rufWhere receivers send failure reports for single messages. Few large receivers send them, and they can contain message content.
adkimDKIM alignment. r (relaxed, the default) lets the DKIM domain be a subdomain of the From domain; s (strict) needs an exact match.
aspfSPF alignment, the same choice for the Return-Path domain.
foWhen a failure report is wanted: 0 (default) when SPF and DKIM both fail, 1 when either fails, d for DKIM, s for SPF. Only matters with ruf.

Tags follow RFC 7489. The generator leaves out tags set to their default (sp equal to p, pct=100, relaxed alignment, fo=0) so the record stays short.

Why roll out in stages

DMARC passes when SPF or DKIM passes for a domain that aligns with the From address. A service you forgot, such as an invoicing tool or a help desk, fails until you set it up. Starting at p=none lets the reports show those senders before any mail is lost. Google's sender guidelines accept p=none for bulk senders: Google, Email sender guidelines (checked 4 Nov 2026).

How the live check works

With "Read the current record" on, we make one DNS query for the TXT record at _dmarc.<domain> through the same checked resolver as the SPF and DMARC checker. Private and reserved names are refused before any query, and nothing is stored.

Get 67 leads free No card. Search free with contacts masked.

SPF, DMARC and MX checkerDKIM checkerSPF record generatorCold email domain name generatorEmail warmup schedule

Questions

What is a good DMARC record to start with?

v=DMARC1; p=none; rua=mailto:dmarc@yourdomain. It changes nothing about delivery and sends you daily reports of who is sending as your domain.

Where do I add a DMARC record?

In your DNS, as a TXT record with the host _dmarc (your DNS panel may show it as _dmarc.yourdomain.com). Keep exactly one.

Should I use p=quarantine or p=reject?

Both are the goal once reports show your real mail passing. Move from none to quarantine, raise pct to 100, then switch to reject.

Is p=none enough for Gmail and Yahoo?

Google's guidelines for bulk senders accept p=none. It does not stop spoofing, so tighten it once your senders pass.

What is the difference between rua and ruf?

rua receives daily aggregate reports, which most receivers send. ruf receives reports on single failing messages, which few large receivers send.

More free tools

Local business counterNo-website business finderLead list previewCold email template generatorSPF record generatorCold email graderIcebreaker generatorCold email domain name generatorAll tools