Free tool · DMARC record generator

Build your DMARC recordone safe step at a time

Answer three questions and copy the record into your DNS. Start by watching, then block spoofed mail once your reports look clean.

What should happen to mail that fails?

Leave it empty to use dmarc@ your domain. Make sure that mailbox exists, because reports arrive every day.

More options

Lower it only while you roll out quarantine or reject. 100 is the goal.

Your DMARC record

Type
TXT
Name (host)
_dmarc
Value
v=DMARC1; p=none;

This record changes nothing for your mail. It only asks receivers to send you reports.

After you publish it

  1. Wait a few minutes, then check it with the DMARC checker.
  2. Read the reports for two to four weeks. Make sure every service that sends your real mail passes.
  3. Come back here, pick quarantine, then reject. Change one step at a time.

Frequently asked questions

Which policy should I start with?

p=none with a report address. It changes nothing for your mail and shows you every service that sends as your domain. After two to four weeks of clean reports, move to p=quarantine, then p=reject.

What if my domain never sends email?

Go straight to v=DMARC1; p=reject; and pair it with an SPF record of v=spf1 -all. There is no real mail to protect, so there is nothing to watch first.

Can I have more than one DMARC record?

No. With two or more TXT records at _dmarc, receivers ignore DMARC completely. Edit the existing record instead of adding a new one.

More free email tools

Email security check

SPF, DKIM, DMARC, MTA-STS, TLS reporting, BIMI and DNSSEC in one check, with a grade.

SPF checker

See who may send as your domain and how many of the 10 DNS lookups you use.

DMARC checker

See whether spoofed mail is blocked, and where your reports go.

MTA-STS checker

Check that mail sent to you must arrive encrypted, and that your policy file works.

Hear about it the day your email setup changes

Domain Lab checks SPF, DKIM, DMARC, MTA-STS, TLS reporting, BIMI and DNSSEC every day, alongside registration, DNS and SSL, and tells you what changed and how to fix it. Free for your first domain.

Start monitoring free