What is a DMARC record?

A DMARC record is a DNS TXT entry published at _dmarc.yourdomain.com that tells receiving mail servers how to handle messages failing SPF and DKIM authentication. It specifies a policy (none, quarantine, reject) and optionally a reporting address.

What policy should I start with?

Start with p=none to collect reports without affecting delivery. Once you confirm all legitimate sources pass authentication, move to quarantine then reject.

The rua tag specifies the email address where aggregate DMARC reports are sent. These daily XML reports show which IPs send email using your domain and whether they pass or fail authentication.

What is DMARC alignment?

Alignment checks that the domain in the visible From header matches the domain authenticated by SPF or DKIM. Relaxed alignment allows subdomains to match; strict requires exact domain match.

Free DMARC Record Generator

✓

DMARC Checker SPF Generator SPF Checker DKIM Checker TLS-RPT Checker MTA-STS Checker BIMI Checker Blocklist Checker DNS Checker