Free DMARC record generator
Choose how strict you want to be and where reports should go, then paste the record into your DNS. Not sure? The defaults below are the safe way to start.
Rolling DMARC out across many domains?
Audit every domain's SPF, DKIM and DMARC in one run, spot the ones still on p=none or missing reports, and export the list. $8 per 1,000 domains.
FAQ
Which policy should I start with?
Start with p=none and a report address. That only monitors and never affects delivery. When reports show every legitimate sender passing, move to quarantine and then reject. Our guide walks through it: Moving DMARC from p=none to p=reject.
Where do I add the record?
At your DNS host, add a TXT record with host _dmarc (some panels want the full _dmarc.yourdomain.com) and the value above. Keep only one DMARC record per domain.
Do I need SPF and DKIM first?
Yes. DMARC passes only when SPF or DKIM passes and matches your From domain. Set them up first. The SPF record generator helps with SPF, and your email provider's admin panel has DKIM.
Is p=none enough for Gmail and Yahoo?
For their 2024 bulk-sender rules, a DMARC record with at least p=none is required (along with SPF, DKIM and alignment). Stricter policies protect your domain from spoofing much better.