Free DMARC Record Generator
Create a valid DMARC record in 60 seconds. Choose your policy, configure reporting, set alignment - copy the result directly into your DNS.
What This DMARC Record Generator Builds
A DMARC record is a single DNS TXT record published at _dmarc.yourdomain.com that tells receiving mail servers how to handle messages from your domain that fail SPF or DKIM authentication. This generator assembles each tag into valid syntax so you never have to hand-write the record or guess at the format.
Pick a policy, enter your aggregate (rua) and forensic (ruf) reporting addresses, choose relaxed or strict alignment, and set an enforcement percentage. The generator outputs a ready-to-paste value. If you only want to understand the anatomy first, see our reference on the DMARC record and the full guide to create a DMARC record.
Every Tag the Generator Can Set
Version (v=)
Always v=DMARC1
Identifies the TXT record as a DMARC record. Must come first.
Policy (p=)
none | quarantine | reject
What receivers do with mail that fails authentication.
Subdomain Policy (sp=)
A separate policy for subdomains
Apply a different rule to every subdomain of your domain.
Aggregate Reports (rua=)
mailto:reports@example.com
Where daily XML aggregate reports are delivered. Required.
Forensic Reports (ruf=)
mailto:failures@example.com
Optional per-message failure reports. Not every receiver sends them.
Enforcement (pct=)
1 – 100 percentage
The share of failing messages the policy applies to. Ramp up gradually.
DKIM Alignment (adkim=)
s (strict) | r (relaxed)
How exactly the DKIM signing domain must match your From header.
SPF Alignment (aspf=)
s (strict) | r (relaxed)
How exactly the SPF domain must match your From header.
Reporting Interval (ri=)
Seconds, default 86400
How often aggregate reports are requested. 86400 = once per day.
Example of a generated DMARC record:
v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@example.com; ruf=mailto:dmarc-failures@example.com; adkim=s; aspf=s; pct=100; How to Generate and Publish Your DMARC Record
Confirm SPF and DKIM first
DMARC builds on SPF and DKIM, so verify both are in place before you generate a record. Validate your SPF with our SPF checker and confirm your signatures with the DKIM lookup.
Choose your policy
Start at p=none to monitor without affecting delivery. Once reports look clean, move to quarantine and then reject for full enforcement against spoofing.
Set reporting addresses and alignment
Enter a rua address so you actually receive aggregate reports, add a ruf address if you want forensic detail, then choose relaxed or strict alignment for SPF and DKIM.
Copy the record into your DNS
Add the generated value as a TXT record at the host _dmarc.yourdomain.com in your DNS provider. DNS changes usually propagate within 5-60 minutes depending on your TTL.
Validate and monitor
Once published, run our DMARC checker to confirm the record resolves and the syntax is valid, then analyze incoming reports in DMARC Report before tightening the policy.
What Happens After You Publish Your DMARC Record?
Within 24-48 hours, receiving mail servers will start checking your DMARC record when processing email from your domain. They'll send aggregate reports (XML) to the address you specified in the rua= tag.
Use DMARC Report to analyze these reports automatically - raw XML aggregate reports are unreadable at scale. DMARC Report parses them into visual dashboards showing who sends email from your domain and whether they pass authentication.
After 2-4 weeks of monitoring at p=none, review your reports, fix any legitimate senders that fail authentication, then gradually enforce: move to p=quarantine (with pct=10 initially), then to p=reject once all legitimate mail consistently passes. For a full walkthrough of how to create a DMARC record, see our guide.
Frequently Asked Questions
What is a DMARC record generator?
A DMARC record generator builds a valid DMARC TXT record by letting you select your policy (none/quarantine/reject), reporting addresses (rua/ruf), alignment mode (relaxed/strict), and enforcement percentage. It outputs the correct syntax so you can copy it directly into your DNS.
Is this DMARC generator free?
Yes - completely free, no signup required. The generator runs entirely in your browser. Nothing is sent to any server.
What policy should I start with?
Start with p=none to monitor without affecting delivery. Review your aggregate reports in DMARC Report for 2-4 weeks, fix any legitimate senders that fail, then move to p=quarantine and eventually p=reject.
Do I need both rua and ruf?
You need rua= (aggregate reports) at minimum - without it, you receive no DMARC reports. ruf= (forensic reports) is optional and provides per-message failure details, but not all receivers send forensic reports (Gmail notably does not).
What is the difference between relaxed and strict alignment?
Relaxed alignment (default) allows subdomains to align with the parent domain - mail.example.com aligns with example.com. Strict alignment requires an exact domain match. Most organizations should use relaxed alignment.
What does the pct tag do?
The pct= tag tells receiving mail servers what percentage of failing messages the policy applies to. Set pct=10 when you first move to quarantine or reject so only 10% of failing mail is affected, then raise it toward 100 as you confirm legitimate senders keep passing.
Where do I publish the generated DMARC record?
Add the generated value as a TXT record at the host _dmarc.yourdomain.com in your DNS provider. After it propagates (usually 5-60 minutes), run a DMARC checker to confirm the record resolves and the syntax validates against RFC 7489.
Need help analyzing your DMARC reports?
DMARC Report turns raw XML aggregate reports into visual dashboards automatically. Start free - no credit card required.
Start Free TrialEasy to Use, Powerful Results
Rated 4.8/5 on G2 · 469 verified reviews
Dave G.
Owner
"DMARC Report has been invaluable in fixing email deliverability issues for our clients"
DMARC Report dashboard allows us to see easily what is compliant and what isn't compliant so we can quickly fix issues.
Antoine L.
"Incredible Service for an affordable price"
The software is easy to use and has also an entry friendly free plan up to 1,000 mails per month.
Zunaid K.
Director
"Essential tool for email delivery"
This tool helps us to implement DMARC reporting for our domains in an easy to use manner.