DMARC Record Generator
Generate a DMARC TXT record with policy, subdomain policy, percentage, report addresses and alignment, or paste an existing record to see what each tag does.
Free · No sign-up · Your inputs stay in your browser
Input
Generate or explain a DMARC record
Output
_dmarc TXT record
TXT _dmarc
v=DMARC1; p=quarantine; rua=mailto:[email protected]
| Tag | Value | Meaning |
|---|---|---|
| v | DMARC1 | Version, must be first |
| p | quarantine | Failing mail goes to spam |
| rua | mailto:[email protected] | Where daily aggregate reports go |
Publish at _dmarc.yourdomain. Start with p=none and read the aggregate reports for a couple of weeks: they list every service sending as your domain, including the ones nobody told you about. Then move to quarantine and reject. Gmail and Yahoo require a DMARC record from bulk senders since February 2024. Reports to an address at another domain need that domain to authorise it with a _report._dmarc record.
Runs in this browser. Nothing you paste is sent to a server.
About this tool
Method, assumptions, practical next steps, and limits.
Roll it out in stages
Start with p=none and an rua address. Aggregate reports arrive daily from Google, Microsoft, Yahoo and others and list every source sending as your domain, including the CRM, the billing system and the forgotten server. Once all legitimate sources pass, move to quarantine, then reject. The protocol is defined in RFC 7489.
Required for bulk senders
Since February 2024, Gmail and Yahoo require domains that send in bulk to publish a DMARC record (p=none is enough) along with SPF and DKIM. Without it, mail to their users is throttled or rejected.