DMARC Record Generator

Build a valid, RFC-compliant DMARC TXT record customised for your domain. Select your enforcement policy, reporting addresses, and alignment mode.

The root sending domain you want to protect with DMARC (e.g. yourdomain.com).
How receiving mail servers should handle unauthorised emails.
Where receivers send daily XML summaries (e.g. dmarc-reports@yourdomain.com).
Where receivers send immediate forensic reports on authentication failures.
Policy applied specifically to subdomains (e.g. mail.yourdomain.com).
Percentage of messages subjected to policy filtering (default: 100%).

DNS TXT Record to Publish

Record Type
TXT
Host / Name
_dmarc
Fully Qualified Domain (FQDN)
_dmarc.yourdomain.com
TTL
Auto (or 3600)
Value / Content
v=DMARC1; p=none

How to Add Your DMARC Record in DNS (Step-by-Step)

Deploying DMARC is the most effective way to eliminate email spoofing and domain impersonation. Follow these 4 steps:

1

Start with p=none

Always begin with p=none (monitoring mode). This allows you to collect diagnostic XML reports without disrupting legitimate outgoing emails.

2

Create DNS TXT Record

In your DNS registrar, add a new TXT record with Name set to _dmarc and paste the generated string in the Value field.

3

Review XML Reports

Receivers (Google, Microsoft, Yahoo) will start sending daily aggregate XML summaries to your rua= address detailing all sending IP addresses.

4

Graduate to p=reject

Once all legitimate senders pass SPF/DKIM alignment, step up your policy to p=quarantine and finally p=reject for full protection.

DNS Provider Quick Reference

Configure the TXT record in your DNS provider's control panel:

DNS Provider Record Type Name / Host Field Value / Content Field TTL / Proxy
Cloudflare TXT _dmarc v=DMARC1; p=... Auto / DNS only
GoDaddy TXT _dmarc v=DMARC1; p=... 1/2 Hour (1800)
Namecheap TXT Record _dmarc v=DMARC1; p=... Automatic
AWS Route 53 TXT _dmarc.yourdomain.com. "v=DMARC1; p=..." 300 seconds
Google Cloud DNS TXT _dmarc.yourdomain.com. "v=DMARC1; p=..." 3600 seconds

Where Do Your XML Reports Go?

DMARC aggregate reports are sent as raw XML files every 24 hours. DMARCify provides a dedicated reporting address, parses reports in real time, and alerts you to security threats.