Free Tool

DMARC Record Generator

Build the correct DMARC TXT record for your domain — with plain-English explanations of every setting. Copy and publish in under 2 minutes.

Your domain

DMARC Policy (p=)

What should receiving servers do with emails that fail DMARC?

p=none Monitor only — no action taken. Good starting point. p=quarantine Send failing emails to spam folder. p=reject Block failing emails entirely. Maximum protection.

Aggregate report email (rua)

Where to send daily DMARC aggregate reports (XML summaries of who's sending email using your domain).

Forensic report email (ruf) — optional

Where to send forensic failure reports (copies of individual failing emails). Not all ESPs send these.

Apply same policy to subdomains (sp=)

Enforcement percentage (pct=)

Percentage of failing emails to apply policy to. Use less than 100% to roll out gradually.

100%

DNS Record Name

_dmarc.yourdomain.com

TXT

Record Value

v=DMARC1; p=none;

How to publish this record

Log in to your DNS provider (Cloudflare, GoDaddy, Namecheap, Route53, etc.)
Create a new TXT record
Set the Name/Host to _dmarc
Paste the record value above into the Value/Content field
Save and wait up to 48 hours for propagation (usually under 1 hour)

Email me this record + a DMARC setup guide

No spam. Unsubscribe any time.

Understanding DMARC

What does DMARC do?

DMARC (Domain-based Message Authentication, Reporting & Conformance) tells receiving servers what to do when an email claiming to be from your domain fails SPF or DKIM checks. Without it, spammers can impersonate your domain.

What policy should I start with?

Start with p=none to monitor without impacting delivery. After reviewing reports for 2–4 weeks, move to p=quarantine, then p=reject once you're confident all legitimate senders are properly authenticated.

Why do I need DMARC reports?

Aggregate reports (rua) show you every IP sending email claiming to be from your domain. This reveals shadow IT, misconfigured ESPs, and spoofing attempts — before they damage your reputation.

Does DMARC affect deliverability?

Yes — positively. Gmail, Yahoo, and Microsoft now require DMARC for bulk senders. Having p=reject significantly improves trust signals and can improve inbox placement rates.

Related Free Tools

SPF Record Builder → Deliverability Health Check → Blacklist Checker →

Monitor Your DMARC Compliance Automatically

Once you publish your DMARC record, InboxEagle monitors your DMARC reports 24/7 — alerting you when new senders appear, when failures spike, and when your policy is ready to strengthen.

Start DMARC Monitoring — Free Trial

No credit card required · Cancel anytime

Not ready yet? See how DMARC Monitoring works →