DMARC record generator
Choose a policy and where to receive reports, and get a DMARC record ready to paste into your DNS. Everything is built in your browser.
Optional: used to show the full record name.
One or more email addresses, separated by commas. Recommended.
Advanced options
Your DMARC record
- Type
- TXT
- Name
- _dmarc
- Value
- v=DMARC1; p=none
- CheckAdd a report address: without reports you cannot see who sends mail as your domain, or which of your own messages fail.
- Checkp=none only monitors. Once the reports show only your own services, move to quarantine, then reject.
Next steps
- At your DNS provider, add a TXT record with the name and value above. If a DMARC record already exists, edit it: a domain must have only one.
- After a few minutes, check it with the SPF & DMARC Checker.
- Read the reports for a few weeks before you make the policy stricter.
Checking a whole list?
Upload a CSV and verify thousands of addresses at once. 200 free checks every month + 100 welcome credits.
How it works
What DMARC does
DMARC tells receiving servers what to do with mail that claims to come from your domain but fails SPF and DKIM: deliver it, send it to spam, or refuse it. Gmail, Yahoo and Outlook require it from bulk senders.
Start with monitoring
Begin with p=none and a report address. The daily reports list every service sending mail as your domain. When only your own services appear, move to p=quarantine, then p=reject.
Where to add it
Create a TXT record named _dmarc at your DNS provider (Cloudflare, OVH, GoDaddy…) and paste the value. Changes usually take a few minutes to a few hours to be visible.
Questions
Do I need SPF and DKIM before DMARC?
Yes. DMARC passes when SPF or DKIM passes for your domain. Set them up first, otherwise a strict DMARC policy can block your own mail.
Can I have two DMARC records?
No. A domain must have exactly one DMARC record. With two, receivers ignore both. Edit the existing record instead of adding a new one.
What happened to the pct tag?
RFC 9989, the updated DMARC standard published in 2026, no longer uses pct, rf and ri. Existing records that contain them still work, so this generator leaves them out.
Is anything sent to your servers?
No. The record is built in your browser. To check a record once it is published, use the free SPF and DMARC checker.
Related guides
- DMARC Fail: What It Means and How to Fix ItDMARC fails when neither SPF nor DKIM passes for your From domain. The usual causes (sending tools, forwarding, subdomains) and how to find yours.
- Gmail, Yahoo and Outlook Sender Requirements in 2026: The Complete ChecklistWhat Gmail, Yahoo and Microsoft Outlook require from email senders in 2026: SPF, DKIM, DMARC, spam rate limits and one-click unsubscribe, with a setup checklist.
- What Is a DKIM Record? How to Find Your Selector, Check Your Key and Fix DKIMWhat a DKIM record is, how to find your DKIM selector, what a good key looks like (2048-bit RSA), and how to fix the most common DKIM problems.
- Why Do Verified Emails Still Bounce? 7 Reasons and What to DoYou verified your list and some emails still bounced. Here are the seven usual reasons, how to tell them apart from the bounce code, and how to prevent each one.