SEOlust logo SEOlust
Security & Privacy

DMARC Record Generator

Create a valid DMARC TXT record — set policy, reporting addresses, alignment and percentage — to stop email spoofing of your domain. Copy the record for _dmarc.yourdomain. Free.

All tools
_dmarc.example.com

💡 How to use

  • Fill in your domain and settings, then add a TXT record at the host shown (_dmarc.yourdomain) with the generated value.
  • Start with p=none and an rua address to monitor, then move to quarantine and reject as you confirm your mail passes.
  • Runs entirely in your browser — nothing is uploaded.

Free DMARC Record Generator

Generate a valid DMARC TXT record for your domain in seconds. Set your policy, reporting addresses, percentage, and alignment, and get the exact record to publish at _dmarc.yourdomain — so you can protect your domain from email spoofing. Free, no sign-up, runs in your browser.

What DMARC does

DMARC (Domain-based Message Authentication, Reporting and Conformance) tells receiving mail servers what to do with emails that claim to be from your domain but fail SPF or DKIM checks. It's the layer that actually stops spoofing and phishing in your name, and it sends you reports on who is emailing as your domain. This tool builds the DNS record that turns DMARC on.

How to use it

It is instant:

  • Enter your domain and choose a policy (start with none).
  • Add an address to receive aggregate reports (rua).
  • Adjust alignment and percentage if needed.
  • Publish a TXT record at the host shown with the generated value.

Choosing a policy

The policy (<code>p=</code>) controls enforcement. <strong>none</strong> only monitors and sends reports — always start here. <strong>quarantine</strong> tells receivers to send failing mail to spam. <strong>reject</strong> blocks it outright, which is the goal for full protection. Move through the stages gradually: monitor with <code>p=none</code>, review the reports to make sure your legitimate mail passes, then tighten to quarantine and finally reject.

Reports and alignment

The <code>rua</code> address receives daily aggregate reports showing which servers send mail as your domain and whether it passes — this is how you find legitimate senders to authorise before enforcing. Alignment (<code>adkim</code>/<code>aspf</code>) controls how strictly the From domain must match the SPF/DKIM domain; relaxed is the safe default. The optional percentage (<code>pct</code>) lets you apply the policy to only part of your mail while testing.

DMARC needs SPF and DKIM

DMARC builds on SPF and DKIM — it checks that at least one of them passes and aligns with your domain. So before enforcing DMARC, make sure your SPF record lists all your legitimate senders and DKIM signing is set up. Use our SPF Record Generator to build the SPF record, and our SPF/DKIM/DMARC Checker to confirm all three are in place and valid.

Privacy

The record is generated entirely in your browser from your inputs — nothing is uploaded, logged, or stored. You can prepare DMARC records for private or client domains without any details leaving your device.

FAQ

Is this DMARC generator free?
Yes. It is completely free, runs in your browser, and needs no account or sign-up.
Where do I publish the DMARC record?
Create a TXT record at the host _dmarc.yourdomain (shown by the tool) in your DNS, with the generated value.
What policy should I start with?
Start with p=none to monitor only, add an rua address, review the reports, then move to quarantine and finally reject once your legitimate mail passes.
What is the rua address for?
It receives aggregate DMARC reports showing who sends email as your domain and whether it passes authentication — essential before enforcing a strict policy.
Do I need SPF and DKIM too?
Yes. DMARC relies on SPF and/or DKIM passing and aligning. Set up both first — use our SPF Record Generator and confirm with our SPF/DKIM/DMARC Checker.
Is my domain data uploaded?
No. The record is generated locally in your browser, so your inputs never leave your device.
What does reject actually do?
p=reject tells receiving servers to block messages that fail DMARC, which stops spoofed emails using your domain from being delivered.

Related tools

Pro tip: pair this tool with Robots.txt Exposure Checker and Cookie Security Checker for a faster SEO workflow.