DMARCdrift
ProductPricingDocsBlogToolsSign inGet started
Sign in
← All toolsDNS record builder

DMARC Record Generator

Configure your DMARC policy and get a ready-to-publish DNS TXT record. Generated in your browser. Nothing sent to our servers.

deprecated in RFC 9990
Generated TXT record

v=DMARC1; p=none

_dmarc.example.com  IN  TXT  "v=DMARC1; p=none"

Generated in your browser. Nothing sent to our servers. Monitor your DMARC reports after publishing.

See plans →

Which policy should you start with?

Start with p=none and a reporting address. This lets you collect DMARC aggregate reports without affecting deliverability. Once you have confirmed that all your legitimate senders are authenticating correctly, move to p=quarantine and eventually p=reject. Skipping straight to reject can silently drop mail from ESPs you forgot to configure.

Frequently asked questions

Where does the DMARC record go in DNS?
Publish it as a TXT record at _dmarc.yourdomain.com. For example, if your domain is example.com, the record goes at _dmarc.example.com. Only one DMARC TXT record is valid per zone.
What is the pct tag for?
pct controls what percentage of failing messages your policy applies to. Setting it to 50 means only half of failing messages get quarantined or rejected. It is a useful way to roll out a stricter policy gradually. The default is 100.
Do I need forensic reports (ruf)?
Not necessarily. Aggregate reports (rua) give you statistical data on all senders. Forensic reports (ruf) are per-message failure reports that can contain headers or redacted content. Many receivers do not send ruf reports due to privacy concerns. Start with rua only.
What is the difference between relaxed and strict alignment?
Relaxed alignment (the default) allows the signing domain to be an organizational domain match. For example, mail from mail.example.com aligns with a DMARC record at example.com. Strict alignment requires an exact domain match. Use relaxed unless you have a specific reason for strict.

Publishing a record is step one.

DMARCdrift parses your DMARC aggregate reports and shows which senders are passing alignment and which are failing. You will see issues before they affect deliverability.

Get started free →

After you publish your record, monitor it with DMARCdrift, free.

See plans →