DMARC Record Builder

What a DMARC record does

A DMARC (Domain-based Message Authentication, Reporting & Conformance) record is a single TXT entry published at _dmarc.yourdomain.com. It tells receiving mail servers what to do with messages that claim to be from your domain but fail SPF and DKIM alignment — quarantine them, reject them outright, or simply let them through while you collect reports. Without one, spoofed mail using your domain has no consequences for the sender, which is exactly what phishing campaigns rely on.

How to use the record this tool generates

Copy the generated value and create a new TXT record at the host shown above the record box (_dmarc plus your domain). Most DNS providers ask for the host and value separately — paste the host into the "name" or "host" field and the full string into the "value" or "content" field. Propagation is usually fast, but can take up to 48 hours depending on your provider's TTL. Once live, verify it with any DMARC checker before you tighten the policy.

Common mistakes

• Publishing more than one DMARC record for the same domain — receivers ignore all of them when duplicates exist.
• Jumping straight to p=reject before confirming every legitimate sending source passes SPF or DKIM. Start at p=none and monitor aggregate reports for a few weeks first.
• Forgetting the rua= reporting address — without it you get the enforcement but none of the visibility into who is sending mail as you.