DMARC Record Generator

Build a DMARC record — starting where you should, not where you want to end.

Result

ISSUE

DMARC record with p=none

Publish this as a TXT record on the _dmarc subdomain. The order it belongs in is monitoring first, enforcement later: p=none with an aggregate address changes nothing about delivery and tells you which of your own systems are failing authentication — which is knowledge you need before enforcing, because the ones you have forgotten are exactly the ones that stop arriving.

TXT record value
v=DMARC1; p=none
Diagnostic telemetry
Host nameThe DNS name the TXT record goes on
_dmarc.yourdomain.com
Policy
none
Aggregate reports
none
Problem
No aggregate report address. Without rua you receive nothing, which means you cannot see which of your own senders are failing — and enforcing a policy blind is how legitimate mail disappears.
Note
p=none monitors without affecting delivery. Run it for a few weeks, read the aggregate reports, and move to quarantine only once every legitimate sender passes.

What this cannot tell you

  • Builds a record from your choices. It does not check whether your mail currently passes — publishing enforcement before knowing that is the mistake this tool is written to prevent.
  • DMARC only works when SPF or DKIM aligns with the domain in the visible from address. A message can pass SPF for a provider's domain and still fail DMARC for yours.
  • Aggregate reports arrive as XML from every participating receiver. Reading them by hand is possible for a small domain and unpleasant for a large one.
  • Nothing here is transmitted. The record is assembled in your browser.

Take this with you

DMARC Record Generator on RunTheTests — free browser-based email tools, no sign-up.