DMARC Record Builder

Create a DMARC TXT record to tell receivers how to handle email that fails authentication.

Policy (p)

Percentage (pct)

Subdomain policy (sp)

Aggregate report address (rua) Forensic report address (ruf, optional)

DKIM alignment (adkim)

SPF alignment (aspf)

DMARC record (host: _dmarc.yourdomain.com) Copied!

What is DMARC?

DMARC (Domain-based Message Authentication, Reporting & Conformance) builds on SPF and DKIM. It tells receiving mail servers what to do when a message fails those checks, and sends you reports so you can see who is sending email as your domain. It's a key defense against phishing and spoofing.

How to roll it out safely

Start with p=none and an rua address to collect reports without affecting delivery.
Review reports for a few weeks to confirm your legitimate mail passes.
Move to p=quarantine, then p=reject once you're confident.
Publish as a TXT record at _dmarc.yourdomain.com.

Example

v=DMARC1; p=none; rua=mailto:reports@example.com is a safe starting record.

DMARC requires a working SPF or DKIM setup first — it relies on them to judge authenticity.

DMARC Record Builder

What is DMARC?

How to roll it out safely

Example

Related tools