DMARC record generator
Choose what should happen to email that fails your SPF and DKIM checks, add an address for reports, and get a DMARC record to copy into your DNS.
Your answers stay in this browser and are never sent to us.
Your result
Fill in the form to begin
Your result appears here straight away. Nothing is uploaded or saved.
What each setting does
- p (policy): what receiving servers should do with failing mail.
noneonly reports,quarantinesends it to junk,rejectrefuses it. - rua: where daily summary reports are sent, so you can see who’s sending as your domain.
- sp: a separate policy for subdomains, if you want one.
- pct: apply the policy to only part of failing mail while you test.
- adkim and aspf: how closely the From address must match the domains checked by DKIM and SPF. Relaxed, the default, suits almost everyone.
Why add DMARC
SPF and DKIM let receiving servers check a message, but they don’t say what to do when the check fails. DMARC fills that gap. It also asks the big providers to send you reports, so for the first time you can see every service sending email as your domain, including ones you’d forgotten about and ones you never set up.
A sensible order
- Make sure your SPF record is right and DKIM is switched on for every service that sends your email.
- Add DMARC with
p=noneand a report address. - After a few weeks of clean reports, change to
p=quarantine. - When you’re confident, change to
p=reject.
Check your records at any stage with the email deliverability checker.
Questions about this tool
Where do I add the DMARC record?
As a TXT record with the name _dmarc. In cPanel’s Zone Editor, add a TXT record for _dmarc.yourdomain.co.uk and paste the value. See how to set up SPF, DKIM and DMARC.
Do I need SPF and DKIM first?
Yes. DMARC builds on them, so a message passes DMARC only if SPF or DKIM passes and matches your domain. Use our SPF generator if you don’t have SPF yet.
What do I do with the reports?
They’re machine-readable files sent by large mail providers. A free DMARC report service can turn them into a readable summary showing which servers send as your domain and whether they pass.
Is p=none enough?
It meets the basic requirement and gives you reports, but it doesn’t stop anyone faking your address. Aim for quarantine or reject once your own email passes.
Related free tools
SPF record generator
Tick the services that send email from your domain and get a single SPF record to copy into your DNS. It covers cPanel hosting, Microsoft 365, Google Workspace and any other service you add.
Open tool → EmailEmail deliverability checker
Emails going to junk, or customers saying they never got your quote? Type your domain to check the four DNS records that decide whether your email is trusted: MX, SPF, DKIM and DMARC.
Open tool → DomainsDNS record checker
Type a domain name to see where its website and email point. The checker looks up the nameservers, website address, www, MX, SPF and DMARC records, and tells you in plain English what's missing or set up wrong.
Open tool →More ways to improve your website.
Get your business website for £47 a month.
We design it, write it, host it and make your changes. No setup fee, no contract, and your first draft commonly the same day.