DMARC Record Generator

Build a DMARC record for your domain. Choose the policy, the reporting addresses, the alignment mode and the rollout percentage, then copy the _dmarc TXT value to publish. Free and instant in your browser.

Read the guide: How to Set Up DMARC
DMARC policy
Publish at host_dmarc
TXT record value
DMARC TXT
v=DMARC1; p=none; adkim=r; aspf=r; rua=mailto:[email protected];

Add this as a TXT record named _dmarc on your domain. Start with p=none, watch the reports, then move to quarantine or reject.

How it works

  1. 1

    Pick a policy

    Set p to none to monitor only, quarantine to send failing mail to spam, or reject to block it outright.

  2. 2

    Add a reporting address

    Put an email in rua to receive the daily aggregate reports that show who is sending as your domain.

  3. 3

    Publish the record

    Copy the value and add it as a TXT record named _dmarc on your domain.

Instant & 100% private — nothing is uploaded

Everything runs locally in your browser. Your code, text and files are processed on your own device and are never sent to a server — so there are no upload waits, no size limits from us, and nothing is ever stored or logged.

Frequently asked questions

What does the DMARC policy do?
The policy (p) tells receivers what to do with mail that claims to be from your domain but fails both SPF and DKIM alignment. none takes no action and only reports, quarantine sends it to spam, and reject blocks it. The usual path is none, then quarantine, then reject as confidence grows.
What is the difference between relaxed and strict alignment?
Alignment checks that the domain SPF or DKIM passed for matches the From address. Relaxed (r) accepts a matching parent domain, so mail.example.com aligns with example.com. Strict (s) requires an exact match. Relaxed is the safe default for most setups.
Do I need rua and ruf?
rua is the important one: it receives the daily aggregate XML reports that show every source sending as your domain, which is how you find legitimate senders before enforcing. ruf sends per-message failure reports and is optional; many providers no longer send them for privacy reasons.
Where does this record go?
It is a TXT record published at the host _dmarc on your domain, so the full name is _dmarc.example.com. The generator shows the host to use, and the record is built in your browser without anything being uploaded.

More tools

JSON Formatter & ValidatorBeautify, minify, validate JSON with a collapsible tree view.Code Formatter & MinifierPretty-print or minify JS, TS, CSS, HTML, JSON, SQL and more.YAML ⇄ JSON ⇄ TOML ConverterConvert config between YAML, JSON and TOML, both ways.JSON Schema Viewer & ValidatorRender a JSON Schema as a tree and validate data against it.Markdown Editor (Live Preview)Write Markdown with a live, side-by-side HTML preview.Mermaid Live EditorTurn Mermaid text into flowcharts and diagrams, live.

More from the Hivly network

Free sister tools on our other sites.

Color Palette GeneratorShuffle palettes with the spacebar, lock favourites, copy hex codes.Length ConverterMetres, feet, miles, inches, km and more, instantly.Word CounterCount words, characters, sentences and reading time live.