DMARC Record Generator
Build a DMARC TXT record (policy, reports, alignment, testing mode) for _dmarc.yourdomain, or paste an existing record to have every tag explained and checked.
Gmail and Yahoo (since February 2024) and Outlook.com (since May 2025) require bulk senders of 5,000+ messages a day to publish DMARC, at least p=none, with aligned SPF or DKIM.
DMARC is now RFC 9989 (May 2026), which replaced RFC 7489: pct, rf and ri were removed and np and t added. Records written for either version keep working.
DMARC tells receiving mail servers what to do with messages that claim to come from your domain but fail SPF and DKIM checks, and where to send reports about them. This generator builds the TXT record to publish at _dmarc.yourdomain — policy, subdomain policies, report addresses, alignment and the new testing flag — following RFC 9989, the standard that replaced RFC 7489 in May 2026. Paste an existing record instead to have every tag checked and explained.
How to use this tool
- Enter your domain and start with p=none and a report address.
- Publish the TXT value at the host _dmarc (your DNS panel may add the domain itself).
- Read the aggregate reports for a few weeks and fix any legitimate senders that fail.
- Move to quarantine and then reject; use "Explain a record" to double-check what is published.
Formula
v=DMARC1; p=none|quarantine|reject; [sp=…; np=…; adkim=r|s; aspf=r|s; t=y|n;] rua=mailto:…; [ruf=mailto:…; fo=0|1|d|s]
v must come first and equals DMARC1 exactly. Tags left out take their defaults (relaxed alignment, fo=0, t=n, sp = p). A message passes DMARC when SPF or DKIM passes for a domain aligned with the visible From address.
Example
For example.com with policy quarantine and reports to dmarc@example.com, publish a TXT record at _dmarc.example.com containing v=DMARC1; p=quarantine; rua=mailto:dmarc@example.com (52 characters). Pasting v=DMARC1; p=reject explains a reject policy with no report address; p=block is rejected as invalid.
Frequently asked questions
Which policy should I start with?
p=none with a rua address. It changes nothing for delivery but shows you every service sending as your domain, so you can fix SPF and DKIM before enforcing.
What happened to pct?
RFC 9989 (May 2026) removed pct, along with rf and ri: in practice only pct=0 and pct=100 were used meaningfully, so the two-valued t tag replaces it — t=y asks receivers to apply one level less (quarantine instead of reject, none instead of quarantine). Old records with pct still parse; receivers on the new standard ignore the tag.
Do I need DMARC if I send little email?
Yes — it stops others from spoofing your domain. Gmail, Yahoo and Outlook.com also require it from bulk senders.
Sources
Last updated:
Page address with these inputs: https://kakao.mobile/tools/dmarc-generator/
Cite or embed this tool
kakaoCalc. (2026, November 8). DMARC Record Generator. https://kakao.mobile/tools/dmarc-generator/
“DMARC Record Generator.” kakaoCalc, 8 Nov. 2026, kakao.mobile/tools/dmarc-generator/.
Paste this code into your page. The widget runs in your visitors' browsers, shows no ads and keeps a link back to this page. Embedding terms