DMARC record generator

Bookmark

DMARC record configuration

DMARC policy*

None

Monitor only - emails are delivered normally

Quarantine

Failed emails may be marked as spam

Reject

Failed emails are completely blocked

Aggregate report emails

Email addresses to receive aggregate DMARC reports.

Percentage of emails to apply policy to

Start with a lower percentage for testing (e.g. 10%). Leave empty for 100% (default).

Generated DMARC record

DNS TXT record value

DNS setup instructions

Go to your DNS provider's control panel
Create a new TXT record
Set the name/host to: _dmarc
Paste the generated value above
Save the record and wait for DNS propagation (up to 24 hours)

Generated DMARC record

Generate DMARC records without hand editing DNS syntax

DMARC record builder

Build a valid DMARC TXT value from policy, reporting, alignment, and failure reporting choices, then copy the exact DNS value to publish. After publishing, use the DMARC checker to verify live DNS. For ongoing visibility, use Suped's DMARC monitoring to track senders, reports, and authentication failures over time.

Get started

"This clarity allows us to take action faster whether it's adjusting content, fixing authentication, or addressing reputation issues. We've moved from reactive guesswork to proactive management."

John Porteous

Group IT Manager

DMARC generation that avoids common mistakes

Use the DMARC record generator to create one clean TXT record, choose a rollout policy, add aggregate and forensic reporting addresses, and keep tag syntax readable before publishing.

DNS record

_dmarc.example.com

TXTv=DMARC1; p=reject

Clean TXT output

Copy one DMARC value with policy, reporting, alignment, and failure options in valid syntax.

p=nonequarantinereject

Policy rollout choices

Start with monitoring, then move toward quarantine or reject when legitimate senders align.

DMARC reports

rua=mailto:dmarc@

ruf=mailto:alerts@

Reporting addresses

Add aggregate and forensic report destinations without hand editing mailto tags.

Record found

Single record

Record valid

Record checks

Review generated DNS syntax before copying the DMARC record into DNS.

DMARC

p=quarantine

SPF failures protected

SPF and DKIM alignment

Choose alignment settings that match how your senders authenticate real mail.

DNS provider

Managed in Vercel

DNS publishing context

Publish the generated TXT value at _dmarc on the sending domain.

DMARC record generator FAQs

Answers to common questions about creating, publishing, and tightening DMARC records.

No. It generates a TXT value you can copy. You still publish the record in your DNS provider.

Publish it as a TXT record at _dmarc.yourdomain.com. The value should start with v=DMARC1 and include a p= policy.

Start with p=none while observing reports if you are not sure all legitimate mail passes authentication. Move toward quarantine or reject after SPF and DKIM alignment are working.

Yes, if you want visibility. The rua tag tells receivers where to send aggregate reports so you can see legitimate senders, failures, and spoofing attempts.

Use relaxed alignment unless you know every sender can pass with an exact domain match. Strict alignment is stronger but easier to break during rollout.