Email Security Check free
Email Security Check / DMARC record generator

DMARC record generator

Pick your settings, copy the host name and value, and add it as a TXT record at your DNS provider. Then check the result with the tester below.

DMARC record generator

Add it as a TXT record at your DNS host. Some hosts want only _dmarc as the name, without your domain.

DKIM selector (optional)

We test 50 common selectors. If your provider uses its own, find s= in the DKIM-Signature header of an email you sent and enter it here.

Recommended rollout

StageRecordHow long
1. Monitorv=DMARC1; p=none; rua=mailto:dmarc@example.com2 to 4 weeks
2. Quarantinev=DMARC1; p=quarantine; rua=mailto:dmarc@example.com2 to 4 weeks
3. Rejectv=DMARC1; p=reject; rua=mailto:dmarc@example.comKeep

If your reports are sent to an address on another domain, that domain must publish an authorization record, or many receivers will not send them.

Frequently asked questions

What do the DMARC tags mean?

v is the version, p the policy for the domain, sp the policy for subdomains, rua where daily aggregate reports go, pct the share of failing mail the policy applies to, and adkim and aspf whether DKIM and SPF domains must match exactly (s) or only the organizational domain (r).

Do I need ruf (forensic reports)?

Rarely. Few receivers send them and they can contain personal data. Aggregate reports (rua) are what you need.

More from Email Security Check

More free security tools

Password GeneratorStrong passwords, passphrases and PINs, made in your browser.Password Leak CheckHas your password been leaked? Check privately against 900+ million breached passwords.One-Time SecretShare passwords with a self-destructing, end-to-end encrypted link.Link Safety CheckIs this link safe? Check for phishing before you click.SiteSentryWebsite security grade A to F: HTTPS, headers, cookies, leaks.