SECURITY
DMARC generator
Create a DMARC TXT record and check the record at _dmarc for your domain. The guidance helps you review the policy and reporting addresses.
DMARC settings
none only monitors, quarantine sends suspicious messages to spam, and reject refuses them. Roll out policies gradually and review reports.
Sets a different policy for subdomains. Leave empty to use the p policy.
Policy for mail from subdomains that do not exist in DNS (DMARCbis). Often set to reject, as nobody legitimately sends from them.
Optional email addresses for regular summarized DMARC reports; separate multiple addresses with commas. Recipients can see sending data for your domain.
Optional addresses for individual failure reports; separate multiple addresses with commas. These may contain personal or sensitive message details, and not all providers send them.
Percentage of matching messages subject to the policy. 100 is the default and is not written to the record; the DMARC revision (DMARCbis) drops pct.
Requested interval between aggregate reports in seconds. The default 86400 (one day) is not written to the record.
Only relevant with ruf: 0 reports when SPF and DKIM both fail, 1 when either fails, d on DKIM failure, s on SPF failure.
r allows relaxed domain alignment; s requires an exact match.
r allows relaxed domain alignment; s requires an exact match.
Generated TXT record
TXT record name (FQDN): _dmarc.example.com.
v=DMARC1; p=none
The record is generated locally in your browser. Review it with your DNS provider before publishing it.
Existing record
Enter a domain and look up DNS to check its published TXT record.