DMARC record generator
DMARC tells receivers what to do with mail that claims to be from your domain but fails SPF and DKIM — and sends you reports about it.
Your TXT record
- Type
- TXT
- Host
- _dmarc
v=DMARC1; p=none
- Without rua you will not see who is sending as your domain. Add a reporting address before tightening the policy.
- p=none only monitors. Move to quarantine once reports show your senders pass.
A safe order to roll it out
- Week one:
p=nonewith a reporting address. Read who is sending as you. - Once every real sender passes:
p=quarantine, optionally at a lower percentage first. - When quarantine has been quiet:
p=reject.
Make sure SPF and DKIM pass before enforcing, or your own mail goes to spam.