Sign up free

DMARC Record Generator

Pick a policy and report addresses, and copy a DMARC record ready for the _dmarc host.

About DMARC Record Generator

A DMARC record generator helps when your mail provider or Gmail's bulk-sender rules ask for DMARC, when you want reports on who sends mail as your domain, or when spoofed messages are hurting your name. Choose the policy (none, quarantine or reject), a separate policy for subdomains, the percentage of failing mail it applies to, and the addresses that receive aggregate and failure reports.

You can also set DKIM and SPF alignment, relaxed or strict, the failure-report options and the report interval. The generator builds the TXT record for the host _dmarc and explains a safe rollout. Start with p=none and a rua address, read the reports for a few weeks, move to quarantine once your own mail passes, then to reject. It all runs in your browser, and nothing is uploaded. After you publish the record, confirm it with the DMARC Checker.

How to use DMARC Record Generator

  1. 1
    Choose the policy

    Pick none to monitor, quarantine to send failing mail to spam, or reject to refuse it.

  2. 2
    Add report addresses

    Enter where aggregate (rua) and failure (ruf) reports should go.

  3. 3
    Fine-tune if needed

    Set the subdomain policy, percentage, alignment and report interval.

  4. 4
    Publish the record

    Copy the TXT value and add it at the host _dmarc in your DNS.

Why use Cubfile for this

  • The common tags

    Policy, subdomain policy, pct, rua, ruf, adkim, aspf, fo and ri, without memorizing the syntax.

  • Safe rollout

    Guidance from none to quarantine to reject, so real mail isn't blocked along the way.

  • Ready for your DNS

    Shows the host, _dmarc, and the TXT value to paste.

  • Runs in your browser

    Nothing is uploaded, and there's no limit on use.

FAQ

DMARC Record Generator: questions and answers

Which DMARC policy should I start with?
Start with p=none and a rua address. Daily reports show which servers send as your domain, and once your own mail passes SPF or DKIM in line with your From address, move to quarantine and then reject.
Where do I add the DMARC record?
Add a TXT record with the host _dmarc, so the full name is _dmarc.yourdomain, and paste the generated value. A domain should have only one DMARC record.
What's the difference between rua and ruf?
The rua address gets aggregate reports, daily XML summaries from receivers such as Gmail and Yahoo. The ruf address gets failure reports about single messages, which few providers send because of privacy concerns.
Do I need SPF and DKIM before DMARC?
DMARC builds on them, since mail passes only if SPF or DKIM passes for a domain that matches the From address. Set up both, for example with the SPF Record Generator and your mail provider's DKIM settings. The DKIM Checker then confirms that the DKIM key is published.
Is the DMARC record generator free?
Yes. It runs entirely in your browser with no sign-up, sends nothing to our server and doesn't count toward any limit.
Share DMARC Record Generator with a friendIt runs in any browser, and they can try it without signing up.

Related tools

MAIL MX Record LookupSee which mail servers receive email for a domain, in priority order.
MAIL DMARC CheckerRead a domain’s DMARC policy and where its reports go.
MAIL Email Header AnalyzerPaste email headers to see the servers a message passed, delays and SPF/DKIM results.
MAIL Email Address CheckerCheck email addresses for typos, disposable domains and working mail servers.
MAIL SPF Record CheckerCheck an SPF record, expand its includes and count DNS lookups.
MAIL DKIM CheckerFind and check a domain’s DKIM keys, trying common selectors for you.
MAIL SPF Record GeneratorBuild a correct SPF record for your mail providers.
SEO Broken Link CheckerCheck every link on a page and list the ones that are broken or redirected.