All free tools

Build your DMARC record.

Choose a policy and reporting mailbox. Get the DNS name, record value and a plain explanation of what receivers are asked to do.

Use a working mailbox or an address from your reporting service. Separate up to five addresses with commas. Reports arrive as XML attachments.

Subdomains, alignment and test mode

This applies where the record is inherited. A subdomain with its own valid DMARC record uses its own policy.

Under RFC 9989, test mode reduces reject to quarantine and quarantine to monitoring. Older receivers may ignore the tag. Start with monitoring if you are still identifying senders.

Free, with no account required. This tool builds text in your browser. It does not look up or change DNS.

Example: start monitoring example.com

For example.com with reports sent to dmarc@example.com, the generated DNS entry is:

Type
TXT
DNS name
_dmarc.example.com
v=DMARC1; p=none; rua=mailto:dmarc@example.com

This asks for aggregate reports without requesting quarantine or rejection for DMARC failure. Review legitimate senders before moving to enforcement.

Publishing your record

Keep one DMARC TXT record at the DNS name. Replace an existing record rather than adding a second. Some DNS hosts expect only _dmarc in the host field; others expect the full name. If reports go to another organisation, ask the reporting provider about external destination authorisation.

The generator uses the current DMARC standard, RFC 9989. It omits obsolete percentage and reporting-interval tags.

Read a DMARC XML report