Generate a DMARC TXT record for your domain. Fill in the form and copy the record into your DNS.

Policy (p)

What to do with emails that fail DMARC checks.

Aggregate Report Email (rua)

Where to send daily summary reports.

Forensic Report Email (ruf)

Where to send per-failure reports.

Percentage (pct)

% of messages the policy applies to.

Subdomain Policy (sp)

Policy for subdomains. Inherits main policy if empty.

DKIM Alignment (adkim)

Strict requires exact domain match; relaxed allows subdomains.

SPF Alignment (aspf)

Strict requires exact domain match; relaxed allows subdomains.

Report Format (rf)

Format of forensic reports.

Failure Reporting (fo)

When to generate forensic reports.

DMARC Tag Reference

v=DMARC1: Required. Identifies the record as DMARC version 1.
p=: Policy. none = monitor only, quarantine = send to spam, reject = block entirely.
rua=: Aggregate reports. Email address (mailto: URI) that receives daily XML summary reports from receiving mail servers.
ruf=: Forensic reports. Email address that receives individual failure reports. Not all providers send these.
pct=: Percentage. The percentage of messages to which the DMARC policy applies (1–100). Useful for gradual rollout.
sp=: Subdomain policy. Overrides the main policy for subdomains. If omitted, subdomains inherit the parent policy.
adkim=: DKIM alignment. r (relaxed, default) allows subdomain matches; s (strict) requires exact domain match.
aspf=: SPF alignment. Same as adkim but for SPF. r = relaxed (default), s = strict.
rf=: Report format. Format for forensic reports. Currently only afrf (Authentication Failure Reporting Format) is defined.
fo=: Failure reporting options. 0 = generate report if all checks fail, 1 = if any check fails, d = DKIM-specific, s = SPF-specific.

DMARC Record Generator