DMARC Record Generator

What is a DMARC Record Generator?

A DMARC Record Generator is a free online tool that turns your DMARC choices into the exact TXT record value your domain needs. DMARC tells receiving servers what to do with email that fails SPF or DKIM checks for your domain. No signup is needed to use this generator.

How to use it

1. Type your domain name.
2. Choose a policy. If this is your first DMARC record, start with none.
3. Set the subdomain policy, alignment modes, and percentage if you need them.
4. Add an aggregate report email (rua) if you want reports, and a forensic email (ruf) only if you need failure reports.
5. Click Generate, then copy the host name and the record value into a new TXT record in your DNS.

How to read your results

The host is always _dmarc plus your domain. The value starts with v=DMARC1 and then lists your choices as short tags. The p tag is the main policy. The pct tag is the share of failing mail the policy applies to. rua and ruf are report addresses, written as mailto links.

Common problems and fixes

If you have no reporting set up, start at p=none and add a rua address so you can see who sends mail as your domain. Do not jump straight to reject, because legitimate mail that is not aligned yet can be blocked. If reports go nowhere, check that the report mailbox exists. After publishing, test the result with the DMARC Checker and the SPF Checker.

FAQ

What policy should I start with?

Start with p=none if you have no DMARC reporting today. It lets you collect reports without changing how mail is delivered.

What is the difference between rua and ruf?

The rua address receives aggregate reports about authentication results. The ruf address receives forensic reports about individual failures, and it is optional.

Where do I publish the generated record?

Publish it as a TXT record at the host _dmarc plus your domain in your DNS settings. Use the exact value this tool generates.

Does DMARC work without SPF and DKIM?

DMARC relies on SPF or DKIM passing with alignment. Set those up first, and check them with the Email Authentication Checker.

When should I move to quarantine or reject?

Move up only after your reports show that all legitimate senders pass with alignment. Tighten the policy in steps and watch reports after each change.