Review before publishing. An enforcing DMARC policy can block legitimate mail. Start with p=none, read the reports, and confirm SPF and DKIM pass for every sender before tightening the policy.

Build your DMARC record

Policy for mail that fails DMARC

Daily summaries of who sends mail as your domain. One address per line.

Advanced options

Per-message failure reports can contain personal data; many providers don’t send them.

Your DMARC record

Type TXT · Host _dmarc.example.com
 

How it works

Runs in your browser. Your choices are validated and assembled into a TXT record for _dmarc.<domain>, with explanations of each tag.

Safeguards & responsible use

  • Processed entirely in your browser — nothing you paste is uploaded or stored.
  • Generated records are suggestions: review them, and start with p=none, before enforcing a policy.

Frequently asked questions

Where do I publish the record?

As a TXT record on the host _dmarc of your domain, e.g. _dmarc.example.com.

Can reports go to another domain?

Yes, but that domain must publish an authorization record (<your-domain>._report._dmarc.<their-domain>) or receivers will skip it.