DMARC record generator

Build a correct DMARC record in a few clicks: start with monitoring, then enforce safely.

Your domain (optional)

Policy



Send aggregate reports to (recommended)

Apply to % of failing mail (quarantine/reject only)

Subdomains




Alignment


The safe rollout

  1. p=none with a report address – learn who sends mail as you (2–4 weeks).
  2. Fix SPF and DKIM for every real sender. SPF generator · check your domain.
  3. p=quarantine, optionally with pct=25 → 100.
  4. p=reject once reports show only your own senders.

Gmail, Yahoo and Outlook require at least p=none for bulk senders; enforcement is what actually stops spoofing.

Rather not touch DNS? I set up SPF, DKIM and DMARC without breaking your other senders, with a before/after report.

Get it fixed on Fiverr