Home › DMARC record generator
Free DMARC generator
This DMARC record generator builds a correct record for you to paste into your DNS. It starts safe, so nothing gets blocked by mistake.
Without a report address you can't see who sends email as you, so you'll never know when it's safe to tighten the policy.
Use a mailbox you check, or a reporting service. Reports arrive as XML files, often several a day.
Your record
v=DMARC1; p=none
Some DNS providers want the full name: _dmarc.yourcompany.com. Only ever have one DMARC record per domain.
Works with any DNS provider, including Cloudflare, GoDaddy, Namecheap, Squarespace and 123 Reg.
Reports pile up fast. EasyDMARC can receive them for you and turn them into a dashboard.
Partner link
A DMARC record is a list of short tags separated by semicolons. Only two are required; the generator adds the rest when they help.
| Tag | Needed? | What it does |
|---|---|---|
v | Required | Version. Always DMARC1, and always first. |
p | Required | Policy for your main domain: none, quarantine or reject. |
rua | Recommended | Where daily summary reports are sent. |
sp | Optional | Policy for subdomains. Follows p if left out. |
pct | Optional | Share of failing mail the policy applies to. Defaults to 100. |
adkim, aspf | Optional | How closely DKIM and SPF must match your From address: r for relaxed (the default) or s for strict. |
ruf | Rarely used | Detailed failure reports. Most inboxes no longer send them, so the generator leaves it out. |
Wherever your domain’s DNS is managed, usually your domain registrar or Cloudflare. Add a TXT record with the name _dmarc and paste the value.
No. Two records cancel each other out and inboxes ignore both. If one already exists, edit it instead of adding another.
A mailbox set aside for them, or a reporting service. Don’t use your personal inbox: busy domains get several reports a day.
When your reports show that every service sending as you passes SPF or DKIM. Go via quarantine first, then reject.