Build a correct DMARC record for your domain and copy it straight into your DNS.
🔒 Generated in your browser – nothing is sent anywhere.
How to use the dmarc record generator
- Enter your domain and the address that should receive reports.
- Pick a policy – start with none.
- Add the TXT record at the host _dmarc in your DNS.
What DMARC does
DMARC tells Gmail, Outlook and other mail providers what to do with email that claims to be from your domain but fails SPF and DKIM checks. Without it, anyone can send convincing fake invoices or password resets in your name.
The safe rollout
Start with p=none and read the reports for a few weeks. When every real sender passes, move to p=quarantine, then p=reject. Jumping straight to reject can block your own newsletters and invoices.
Frequently asked questions
Where do I add the record?
In your DNS provider (Cloudflare, GoDaddy, Namecheap, Hostinger…) as a TXT record with the host _dmarc.
Do I need SPF and DKIM first?
Yes – DMARC relies on them. Set up SPF and DKIM for every service that sends your email, then add DMARC.
Do Gmail and Yahoo require DMARC?
Bulk senders must have a DMARC record; without one, more of your mail lands in spam.