DMARC record generator.

A DMARC record is one TXT line at _dmarc.yourdomain.com that tells receiving servers what to do with mail that fails SPF and DKIM checks. Build yours below, start with the policy set to none, read the reports, then tighten it.

Your domain

Policy

Subdomain policy (optional)

Aggregate report email (recommended)

Failure report email (optional)

Apply the policy to 100 percent of mail

DKIM alignment

SPF alignment

Your DMARC record

v=DMARC1; p=none

Add it to your DNS

Type: TXT
Host or name: _dmarc.yourdomain.com
Value: the record on the left

How to roll it out.

1. Publish the record with p=none and an address for aggregate reports. Nothing is blocked yet.
2. Read the reports for two to four weeks. They list every system sending as your domain, including Klaviyo, your store platform and your help desk.
3. Fix any legitimate sender that fails. Usually that means finishing the DKIM setup for that tool.
4. Move to quarantine, ideally with a lower percentage first, then to reject once nothing legitimate fails.

The tool runs in your browser and sends nothing anywhere. It does not check your live DNS. For background, read SPF, DKIM and DMARC explained and do I need DMARC, and check the other half with the SPF record checker.

Want this set up and monitored for you? See our email deliverability service or book a free audit.

Find out what your list is actually worth.

We review your flows, list health, authentication records and last ninety days of performance, then send back what we found.

Book your free audit Send a message instead

30 minutes, no obligation, and the findings are yours to keep either way.