Email authentication

DMARC Generator

Generate a valid DMARC record with the right policy, reporting and alignment. Free DMARC generator with a safe none → quarantine → reject rollout and AI guidance.

Configure your DMARC record

Set your policy and reporting addresses. The record updates instantly.

Your DMARC record

Host / Name

_dmarc.yourdomain.com

Value (TXT)

v=DMARC1; p=none; adkim=r; aspf=r
none
Policy
100%
Coverage
Off
Reporting
p=none only monitors — it does not stop spoofing. Add a rua address, then advance to quarantine.

What this DMARC generator does

Builds a valid v=DMARC1 record from your choices
Supports policy, subdomain policy and pct ramp
Adds aggregate (rua) and forensic (ruf) reporting
Sets SPF and DKIM alignment (relaxed or strict)
Shows the exact _dmarc DNS host to publish at
Explains a safe none → quarantine → reject rollout

Common use cases

  1. 1Deploying DMARC for the first time in monitoring mode
  2. 2Advancing from p=none to quarantine or reject
  3. 3Adding a reporting address to see who sends as you
  4. 4Setting a stricter subdomain policy
  5. 5Ramping enforcement gradually with pct
  6. 6Preparing DMARC before requesting a BIMI logo

Related tools

DMARC policy advisorDMARC Record CheckerDMARC aggregate report parserSPF generatorDKIM key generatorBIMI generator

About DMARC

DMARC tells receivers what to do with mail that fails SPF and DKIM alignment, and where to send reports. It is published as a TXT record at _dmarc.yourdomain.com. Always start at p=none with a rua address to gather data without affecting delivery.

Once aggregate reports confirm every legitimate source passes alignment, move to p=quarantine (ramping pct from 25 → 100), then to p=reject for full protection. DMARC depends on correctly configured SPF and DKIM.

More Free Tools Where This Came From

This utility is one of dozens of free, no-login tools for DNS, email, SEO and developers — all instant and private.

See All ToolsTalk to Our Team

HostCloud.in  ·  Pune, India  ·  Serving 34,987+ Websites Since 2020

FREQUENTLY ASKED QUESTIONS

Got Questions? We Have Answers.

What is a DMARC record?

A DMARC record is a DNS TXT record at _dmarc.yourdomain.com that tells receivers what to do with mail failing SPF and DKIM alignment, and where to send reports.

Which DMARC policy should I start with?

Always start at p=none with a rua reporting address. It monitors without affecting delivery, so you can see every source before enforcing.

What is the difference between rua and ruf?

rua receives daily aggregate reports (volume and alignment per source); ruf receives per-message forensic failure reports. rua is essential; ruf is optional and less widely sent.

What does pct do?

pct applies your policy to a percentage of failing mail, letting you ramp enforcement gradually (for example 25 → 50 → 100) while watching reports.

Relaxed or strict alignment?

Relaxed (r) allows subdomains to align and suits most setups. Strict (s) requires an exact domain match — use it only when every sender signs with the exact domain.

Where do I publish the DMARC record?

Create a TXT record with host _dmarc (so _dmarc.yourdomain.com) and paste the generated value. Allow time for DNS to propagate, then verify it.