DMARC Record Generator

Step 1 of 4

What is your domain?

Enter the domain you want to create a DMARC record for. The record will be published at _dmarc.yourdomain.com.

Domain name

Do not include http:// or www. Just the bare domain.

Step 2 of 4

Choose your DMARC policy

The policy tells receiving mail servers what to do with email that fails both SPF and DKIM alignment.

p=none — Monitor only (recommended start)

No action taken on failing email. Reports are collected so you can see who sends on your behalf before enforcing.

p=quarantine — Send to spam

Failing email is delivered to the spam/junk folder. A good intermediate step once you have classified your senders.

p=reject — Block completely

Failing email is rejected at the gateway. The strongest protection — only use this when you are fully confident in your sender inventory.

Recommendation: Start with p=none to collect data without affecting mail delivery. Once you have reviewed your aggregate reports and classified all legitimate senders, move to quarantine and then reject.

Step 3 of 4

Reporting and alignment

Configure where aggregate and forensic reports are sent, and how strictly SPF/DKIM alignment is checked.

Aggregate report address (rua)

Aggregate XML reports are sent daily to this address. One or more mailto: URIs, comma-separated.

Free report collection: Point your rua= at [email protected] and Sentura will collect, parse, and visualise your DMARC data for free during your trial. No manual XML parsing required.

Forensic report address (ruf) — optional

Failure-level reports for individual messages. Many providers do not send these. Leave blank to omit.

Percentage of messages to apply policy to (pct)

100%

Start at 100% for p=none. When moving to quarantine or reject, you can ramp gradually (e.g. 10% then 50% then 100%).

DKIM alignment (adkim)

r — Relaxed s — Strict

Relaxed allows subdomains (e.g. mail.example.com passes for example.com). Strict requires an exact match.

SPF alignment (aspf)

r — Relaxed s — Strict

Relaxed allows the Return-Path domain to be a subdomain of the From domain. Strict requires an exact match.

Subdomain policy (sp)

Same as p none quarantine reject

Policy applied to subdomains. "Same as p" inherits the main policy. Setting a separate subdomain policy is useful if your subdomains have different sender profiles.

Step 4 of 4

Your DMARC record

Add this TXT record to your DNS provider. Changes may take up to 48 hours to propagate.

Name _dmarc.example.com

Type TXT

Value

Tag reference

Tag	Description	Your value

Sentura parses your DMARC reports automatically, classifies every sender, and tells you when it is safe to enforce.

Start free trial Get a demo