Skip to content

DMARC Record Generator

Create valid DMARC DNS TXT records online to protect your domain from spoofing and phishing. Free step-by-step DMARC policy builder.

Domain

Policy Settings

No action is taken on failing messages. Use this to collect reports and understand your email flow before enforcing.

1%100%

Alignment Settings

Reporting Settings

Receives daily XML aggregate reports. Highly recommended for monitoring.

Receives per-message failure reports. Not supported by all providers.

Default: 86400 (24 hours). Common values: 3600 (1 hour), 43200 (12 hours), 86400 (24 hours).

Monitoring Mode

Your DMARC policy is set to monitor only. No messages will be blocked or quarantined. This is the recommended starting point to collect data before enforcing stricter policies.

MonitorQuarantineReject

Generated DMARC Record

_dmarc.example.com
TXT
v=DMARC1; p=none
v=DMARC1DMARC version
p=noneDomain policy

DNS Setup Instructions

  1. Log in to your DNS provider or domain registrar (e.g., Cloudflare, GoDaddy, Namecheap, Route 53).
  2. Navigate to the DNS management section for your domain.
  3. Create a new TXT record with the following values:
    • Host/Name: _dmarc.example.com
    • Type: TXT
    • Value: the generated record above
    • TTL: 3600 (1 hour) or your provider's default
  4. Save the record. DNS propagation typically takes a few minutes to 48 hours.
  5. Verify your DMARC record using a DMARC lookup tool or by running: nslookup -type=txt _dmarc.example.com
Important: Before setting p=quarantine or p=reject, make sure you have:
  • Configured SPF records for all sending sources
  • Set up DKIM signing for your domain
  • Monitored DMARC reports with p=none first
  • Confirmed legitimate email sources pass authentication

Understanding DMARC Records

DMARC (Domain-based Message Authentication, Reporting & Conformance) is an email authentication protocol that builds on top of SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail). It allows domain owners to publish a policy in their DNS records that specifies how receiving mail servers should handle messages that fail authentication checks.

DMARC solves a critical problem in email security: even with SPF and DKIM in place, there was no standardized way for domain owners to tell receiving servers what to do when authentication failed, or to get feedback about messages claiming to be from their domain.

A DMARC record is published as a DNS TXT record at _dmarc.yourdomain.com and contains the policy along with optional reporting addresses and alignment settings.

How to Use DMARC Record Generator

1

Open DMARC Record Generator

Navigate to DMARC Record Generator in your browser — no installation or sign-up required.

2

Enter your data

Type, paste, or upload the content you want to process into the input area.

3

Configure options

Adjust any available settings to customize the output to your needs.

4

Get your result

The result appears instantly. Copy it to your clipboard or download it as a file.

Frequently Asked Questions

DMARC Record Generator is a free online email utilities tool. Create valid DMARC DNS TXT records online to protect your domain from spoofing and phishing. Free step-by-step DMARC policy builder.