DMARC record generator

Build a DMARC record and move safely from monitoring to blocking fakes.

Your DMARC record

Type TXT · Host _dmarc (some DNS hosts want _dmarc.yourdomain.com) · keep exactly one.

Check my domain

The safe path to p=reject

  1. Week 0: publish p=none with a reporting address. Nothing changes for your email; you start receiving daily reports.
  2. Weeks 1–4: read the reports. Every service that sends as you should pass SPF or DKIM in alignment. Fix any that don't (turn on DKIM in that tool, or add it to SPF).
  3. Then: move to p=quarantine, optionally with pct=25 and rising, and finally p=reject.

Reports arrive as XML attachments, often dozens a day. A DMARC report service turns them into readable dashboards.