Free DMARC Record Builder. Create Valid Records Instantly.

Your Generated DMARC Record

TXT Record for: _dmarc.[your-domain]

v=DMARC1; p=none

Domain Name

Enter your domain to personalize the instructions for your mail server and validate external report destinations. This helps ensure legitimate email from your domain passes authentication.

International domains are supported (e.g., münchen.de)

Policy Settings

Policy (p) - Required

Start with "none" to monitor legitimate email and failed email attempts, then gradually move to "quarantine" or "reject" based on your email service needs. Learn more

Subdomain Policy (sp) - Optional

Policy for all subdomains sending emails from your mail server. If not set, inherits the main policy from your DNS zone. Learn more

Alignment Settings

DKIM Alignment (adkim) - Optional

Controls how strictly DKIM signature domains must match the From address when your email server sends messages. Learn more

SPF Alignment (aspf) - Optional

Controls how strictly SPF domains must match the From address, ensuring your IP address is authorized for sending emails. Learn more

Reporting Settings

Aggregate Report URIs (rua) - Optional

Email addresses to receive daily aggregate reports about legitimate email and failed email attempts from your domain. Separate multiple with commas. Learn more

Forensic Report URIs (ruf) - Optional

Email addresses for detailed failure reports about failed email authentication (rarely supported by email service providers). Learn more

Failure Options (fo) - Optional

0 - Generate report if all checks fail (default) 1 - Generate report if any check fails d - Generate report if DKIM fails s - Generate report if SPF fails

Controls when forensic reports are generated. Multiple options can be selected. Learn more

Note about deprecated fields: The DMARC specification includes three deprecated fields (pct, ri, rf) that are being removed in DMARCbis. We don't include these in the generator as they're no longer recommended for new implementations.

How to Deploy Your DMARC Record

1
Copy the generated record using the button above.
2
Log in to your DNS provider (e.g., GoDaddy, Cloudflare, Route53).
3
Create a new TXT record with:
- • Name/Host: _dmarc
- • Type: TXT
- • Value: Your generated DMARC record
- • TTL: 3600 (or your provider's default)
4
Save the record and wait for DNS propagation (usually 5-30 minutes).
5
Verify your configuration using our free DMARC checker.

⚠️ Important: The record must be created at _dmarc.[your-domain], not at the root domain. The underscore prefix is required.

Why Use This Free Builder?

Instant DMARC Record Creation

This tool creates valid DNS records in seconds. No complex syntax to learn — configure your policy using the intuitive interface and get a production‑ready DMARC record.

Real-Time Validation

Every DMARC record is validated against RFC 7489. The builder checks for syntax errors and warns about potential configuration issues before deployment.

No Registration Required

Use this tool completely free without creating an account. Generate unlimited DMARC records for all your domains with no restrictions or hidden fees.

Expert Deployment Guidance

Get step-by-step instructions for deploying your generated DMARC record across popular DNS providers. Includes best practices and troubleshooting tips from email security experts.

DMARC DNS Record Best Practices

• Start with policy "none" to monitor email authentication without affecting delivery
• Add aggregate report URIs to receive daily DMARC reports
• Gradually increase policy enforcement after monitoring results
• Test your generated record with our free DMARC checker after deployment

Free DMARC Generator