Runs in your browser

DMARC record generator

Build a DMARC record: what receivers should do with mail that fails, where to send reports, and how strict alignment is.

Your policy

TXT record at

Start with p=none and a rua address, read the reports for a few weeks, then move to quarantine and reject once every legitimate sender passes. Test mode (t=y) asks receivers not to apply a stricter policy yet while reports keep coming; it replaced pct, which RFC 9989 removed in May 2026.
Gmail and Yahoo accept p=none from bulk senders, but the record has to be published and the mail has to pass DMARC: the From: domain aligned with the SPF or DKIM domain (sender requirements).
Reports sent to an address outside your own organisation’s domain (a reporting service, for example) need that domain to publish an authorisation record; the note under the record names it (RFC 9990, section 4).