[ Free tool · Generators ]

DMARC Generator

Build a valid _dmarc TXT record with guided options.

Domain

Policy (p)

Start at none to collect reports, then move to quarantine and reject.

Subdomain policy (sp)

Percentage (pct) · 100%

Aggregate reports (rua)

Comma-separate multiple addresses.

Forensic reports (ruf) · optional

DKIM alignment (adkim)

SPF alignment (aspf)

Host / name

_dmarc.example.com

TXT value

v=DMARC1; p=none; rua=mailto:dmarc@example.com

Type: TXT · TTL: 3600. Publish one DMARC record only.

  • Monitoring mode. Review reports for 2–4 weeks before enforcing.

[ About this tool ]

This DMARC generator builds a valid v=DMARC1 TXT record from your chosen policy, reporting addresses and alignment settings.

How to read the results

  • ›Start with p=none and a rua address.
  • ›Publish the result as a TXT record on host _dmarc.
  • ›Move to quarantine and reject after reviewing reports.

Frequently asked questions

What should my first DMARC record be?

v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com is a safe start that collects reports without affecting delivery.

Where do I add the DMARC record?

In your DNS provider, as a TXT record with the name _dmarc.

Learn more in our guide: What is DMARC?

Enterprise provenance

Why top financial institutions and governments retired their email security dashboards.

Traditional email authentication platforms sell you a dashboard and ask your engineers to do the labour. In high-stakes environments, manual oversight means delayed enforcement, configuration drift and unmonitored shadow domains.

EmailAuth is the agentic email provenance platform. Our agents enforce p=reject, keep third-party senders aligned and move your domains to full RFC 9989 compliance, the new DMARC standard,, with human-in-the-loop auditability.

Governments Large enterprises Tier-1 financial institutions

SaaS · Dedicated tenancy · Air-gapped on-prem · BYOK encryption

[ More tools ]

DMARC Checker

Look up and explain any domain's live DMARC record.

DMARC Report Analyzer

Upload XML aggregate reports for an instant compliance dashboard.

Full Domain Health Scan

Run every email security check at once and get one score.

SPF Checker

Validate your SPF record and check the 10-lookup limit.

DKIM Lookup

Verify a DKIM selector is published and the key is valid.

BIMI Record Checker

Check a BIMI record and whether the logo will actually display.