DMARC Record Generator
Create a DMARC TXT record with policy, reporting and alignment settings.
About this tool
DMARC tells receiving servers what to do when SPF or DKIM fail for messages claiming to be from your domain. This generator builds the TXT record for _dmarc.yourdomain.com with your chosen policy, aggregate report address (rua), optional forensic reports (ruf), percentage (pct) and alignment mode.
Start with p=none and a rua mailbox to collect reports, fix any legitimate senders that fail authentication, then move to p=quarantine and finally p=reject. SPF and DKIM should be in place before enforcing a strict policy.
Frequently asked questions
What rua address should I use?
Use a mailbox you control, e.g. dmarc@yourdomain.com. Many teams use a dedicated address or a third-party DMARC report parser. The address must be able to receive XML report attachments.
Should I start with p=reject?
No. Start at p=none to monitor without affecting delivery. Upgrade only after rua reports show all legitimate mail passes SPF/DKIM alignment.
What is the difference between relaxed and strict alignment?
Relaxed (r) allows the organizational domain to match between the From header and SPF/DKIM domain (e.g. mail.example.com aligns with example.com). Strict (s) requires an exact domain match.