DMARC Record Generator

Pick your domain and policy — the DMARC value for your DNS is ready instantly.

Your text and files never leave your browser — nothing is sent to a server.

Relaxed treats subdomains as the same domain; strict requires an exact match.
pct is the share of mail the policy applies to; ri is how often reports are sent (default 86400 seconds = one day).
Failure report options (fo)
  • Host
  • TypeTXT
  • Value
DNS zone file format

How to use

  1. Enter the domain you send mail from (for example, example.com). The host name _dmarc.example.com is created for you.
  2. If you are just starting, keep the policy at none and add a rua address for reports. Watch them for a few weeks to make sure SPF and DKIM pass.
  3. Once everything looks good, move to quarantine and finally reject. You can use pct to apply the policy to only part of your mail first.
  4. In your DNS dashboard, add a TXT record with “Host” as the name and “Value” as the content, then save.

FAQ

What do I need before adding DMARC?

SPF and DKIM should already be set up. DMARC is a rule that acts on those two checks, so without them even legitimate mail can fail.

Do I enter the full _dmarc.example.com as the host?

It depends on your DNS provider. Many append the domain automatically, so you only type _dmarc. After saving, make sure it did not become _dmarc.example.com.example.com.

How long does it take to work?

DNS changes usually show up within minutes to a few hours, and up to about a day depending on the TTL. Aggregate reports typically start arriving the next day.

Related tools

All tools