TOOL / DMARC-RECORD-BUILDER

DMARC Record Builder

Build a DMARC record step by step. Every option is explained in plain English. The record updates live.

Generated record

TXT name: _dmarc

v=DMARC1; p=none

Step 1 — Policy (required)

Start with none to collect data without affecting mail flow. Move to quarantine then reject once you are confident all legitimate senders pass SPF and DKIM.

None

Monitor only. No mail is blocked. Use this to start collecting reports.

Quarantine

Failing mail goes to spam. Partial enforcement.

Reject

Failing mail is rejected. Maximum protection.

Step 2 — Aggregate reports (rua)

Aggregate reports (XML) are sent daily by receiving mail servers showing who is sending mail from your domain and whether it passes. Highly recommended.

Report destination email address(es) — separate multiple with commas

Third-party services like Postmark, Valimail, or Dmarcian can receive and parse these reports for you.

Also include forensic failure reports (ruf) — individual failure reports, less common

Step 3 — Alignment mode

DKIM alignment (adkim)

SPF alignment (aspf)

Relaxed allows subdomains to match. Strict requires an exact match. Start with relaxed — strict can break legitimate mail from subdomains or ESPs.

Step 4 — Advanced options

Set subdomain policy (sp)

Override the policy for subdomains separately from the main domain.

Percentage rollout (pct)

Only apply the policy to a percentage of failing messages. Useful when rolling out quarantine or reject gradually.

Failure reporting options (fo)

How to publish: Add this as a TXT record with name _dmarc on your domain (e.g. _dmarc.yourdomain.com). Use the DMARC Checker tool to verify after publishing.