DMARC Generator

DMARC record generator

DMARC ties SPF and DKIM together and tells receivers what to do when both fail. Without it, a forgery that fails every check still lands in the inbox.

Domain: Scheme and path are optional — https://example.com/page works too.

What should receivers do with failures? Start at none, read the reports for a few weeks, then tighten.

Different policy for subdomains? (optional)

Send aggregate reports to: (optional) Daily XML summaries of who is sending as your domain.

Send failure reports to: (optional) Per-message forensic reports. Most receivers do not send these, and they can contain message content.

Alignment:

Apply to %: