DMARC Generator

About this tool

Create DMARC DNS entries comfortably in the browser. No data is sent to the server.

Domain (optional)

Optional: Used to display the record name (e.g. _dmarc.example.com).

Determines how recipients handle non-conforming emails: none = reports only, quarantine = quarantine, reject = reject.

Applies to subdomains. If empty, the main policy (p) is used.

adkim controls DKIM alignment: relaxed (r) allows subdomains, strict (s) requires exact domain match.

aspf controls SPF alignment: relaxed (r) allows subdomains, strict (s) requires exact domain match.

rua (Aggregate Reports)

Email or mailto:...

Multiple recipients possible. It is recommended to use mailto: (e.g. mailto:dmarc@example.com).

ruf (Forensic Reports)

Email or mailto:...

0 (Default)

1 (every mail)

d (DKIM fail)

s (SPF fail)

Controls when forensic reports are sent: 0 = only when both SPF and DKIM (aligned) fail, 1 = on every error, d = on DKIM error, s = on SPF error.

pct (100%)

pct determines what percentage of messages are subject to the policy (default 100%).

Reporting Interval (ri, seconds)

ri specifies the interval in seconds for aggregate reports (default 86400 = 24 hours).

The entry is published as a TXT record.

Record Name

(_dmarc.<deine-domain>)

Record Value

v=DMARC1; p=none; adkim=r; aspf=r