DMARC Record Generator & Checker
Create the DMARC record for your domain, or check an existing one and see what each setting means.
v=DMARC1; p=none
Add a report address: without reports you can't see who sends email as your domain.
Check a domain's DMARC record
A safe path to p=reject
- Week 1+: publish p=none with a rua address and read the reports.
- Fix senders: make sure every service that sends for you (newsletter, CRM, helpdesk, invoices) passes SPF or DKIM for your domain.
- Then: move to p=quarantine, optionally with pct below 100 at first.
- Finally: p=reject, once reports show only forged mail failing.
Frequently asked questions
What is a DMARC record?
DMARC is a DNS TXT record at _dmarc.yourdomain.com. It tells receiving mail servers what to do with email that claims to be from your domain but fails SPF and DKIM checks, and where to send reports about it.
Do I need DMARC?
Since February 2024, Gmail and Yahoo require bulk senders to publish a DMARC record (at least p=none). For any business, DMARC helps stop others from sending email that pretends to be you.
Which policy should I start with?
Start with p=none and a rua address to collect reports. Once the reports show that every service sending for you passes SPF or DKIM, move to p=quarantine, then p=reject.
Where do I add it?
In your DNS settings, add a TXT record with the host or name _dmarc (some DNS hosts want _dmarc.yourdomain.com) and paste the generated value.
Is my domain stored?
No. The checker asks a public DNS resolver (Cloudflare, or Google Public DNS as a fallback) directly from your browser. Nothing goes to a GiiS server.
Related free tools
SPF record generator · Spam word checker · Subject line checker · Email signature generator