Free DMARC record generator
Create a DMARC record to protect your domain from spoofing and see who sends email using it.
Make sure SPF and DKIM are set up first – check them with our SPF, DKIM, and DMARC checker.
Lower this temporarily to roll out quarantine or reject gradually.
Daily summaries of who sent email using your domain, and whether it passed. Recommended. Separate multiple addresses with commas.
Copies of individual failing messages. Few providers send these.
Advanced options
Your DMARC record
Add a TXT record for _dmarc with the value:
Click the record to copy it ↗
What is DMARC?
DMARC (Domain-based Message Authentication, Reporting and Conformance) tells receiving servers what to do with email that claims to be from your domain but fails SPF and DKIM checks, and where to send reports about it. Gmail, Yahoo and Microsoft require a DMARC record for domains that send large volumes of email.
Reports sent to an address at a different domain only arrive if that domain publishes a record authorizing them (for example, example.com._report._dmarc.reports.example.net). Reporting services set this up for you.
A free tool provided by Auth-Email
Auth-Email makes your Gmail, Outlook, or other OAuth 2.0 email account available to any IMAP, POP3, or SMTP email client — no app passwords or special configuration needed.
Frequently asked questions
Where do I add my DMARC record?
Add it as a TXT record named _dmarc (for example, _dmarc.example.com) in your DNS provider’s control panel.
Which DMARC policy should I start with?
Start with p=none and a reporting address so you can see who sends email for your domain without affecting delivery. Once SPF and DKIM pass for all of your legitimate email, move to p=quarantine and then p=reject.