Free DMARC record generator
Build a DMARC record the safe way — start in monitor mode, see who's sending as your domain, then graduate to full enforcement without dropping a single legitimate email.
Start at Monitor— see who's sending as you before you block anything.
Where mailbox providers send their daily aggregate reports. Separate multiple with commas.
Publish this record
Type
TXT
Host / name
_dmarc.<your-domain>Value
v=DMARC1; p=noneValidation
weakThe safe rollout to enforcement
Monitor (p=none)
Publish p=none with a reporting address and change nothing else for 2–4 weeks. Reports show you every source sending as your domain — including the ones you forgot about.
Quarantine a slice (p=quarantine; pct=25)
Once your real senders pass SPF or DKIM aligned, quarantine 25% of failing mail. Watch reports for a week, then raise pct toward 100.
Quarantine all (p=quarantine)
Quarantine 100% of failing mail. Confirm nothing legitimate is landing in spam before the final step.
Reject (p=reject)
Tell receivers to reject unauthenticated mail outright — impersonation is blocked at the door. This is full protection.
Already publishing DMARC? Validate your current record — or feed your aggregate reports into DMARC visibility to see exactly who's sending as you and when it's safe to move to p=reject.
Keep hardening your email
Each record is one layer. Check the rest of yours — every tool is free, no account.