DMARC record generator

Your DMARC record

Type or paste a record here, or use the form below — the two stay in sync.

Policy (p)

Action on failing mail.

Subdomain (sp)

Override for subdomains.

Non-existent subdomains (np)

Policy for subdomains that have no DNS records (DMARCbis).

Aggregate report address (rua)

One or more addresses, comma separated. Daily XML summaries are sent here.

Failure report address (ruf)

Per-message forensic copies. Rarely supported and may carry personal data.

Percentage (pct)

Share of failing mail the policy hits.

Report interval (ri)

Seconds (default 86400).

DKIM alignment (adkim)

SPF alignment (aspf)

Failure reporting options (fo)

0 — SPF and DKIM both fail 1 — SPF or DKIM fails (recommended) d — DKIM fails s — SPF fails

Build the record with the form, or paste an existing one into the box at the top and adjust it.
Copy the record from the box.
In your DNS provider, add a TXT record — name / host _dmarc.yourdomain.com, value = the record.
Leave TTL at the default. After it propagates, re-check it with a DNS lookup.
Start at p=none with a rua address, read the aggregate reports for a few weeks, then tighten to quarantine and finally reject.