Donaldson R F DMARC Record Generator
Create the DMARC TXT record for your domain — policy, report addresses, alignment and rollout percentage — with the exact name and value to put in your DNS.
Things to know
Already have a DMARC record? Load it here
How to roll out DMARC safely
DMARC tells receiving mail servers what to do with messages that claim to be from your domain but fail SPF and DKIM checks — and asks them to send you reports. Start with p=none and an rua address: nothing is blocked, and after a few weeks the reports show every service that sends mail as your domain, so you can fix the ones that fail. Then move to p=quarantine (try pct=10, then 25, 50 and 100) and finally p=reject.
Publish the record as a TXT record with the name _dmarc (your DNS provider may want the full _dmarc.example.com). You need working SPF and DKIM first. After publishing, check it with the SPF & DMARC checker (and your DKIM key with the DKIM record checker); a strict policy is also required if you want to show your logo with BIMI. Tags left at their default (relaxed alignment, pct 100, fo 0, ri 86400) are omitted to keep the record short.
Frequently asked questions
Which policy should I choose first?
none. It changes nothing for your mail but starts the reports.
Do I need a report address?
Yes, in practice: without reports you cannot tell who sends as your domain. Use a dedicated mailbox or a DMARC reporting service, because reports arrive as many automated emails.
Is my domain sent anywhere?
No. The record is built in your browser; the tool does not query DNS.