How to use it
- Enter the domain that will publish the DMARC record.
- Select none, quarantine, or reject for Policy (p).
- Choose the Percentage (pct) applied to the policy.
- Add aggregate and forensic report email addresses if required.
- Click Generate DMARC Record to build the value.
- Copy the generated record and review it before DNS publication.
The generator does not validate email addresses, reporting authorization, or existing DNS. It always sets relaxed SPF and DKIM alignment and makes sp equal to p.
What is the purpose of the tool
DMARC Record Generator creates a basic v=DMARC1 TXT string from the controls on the page. It supports none, quarantine, and reject policies with 100, 50, or 25 percent application.
Optional rua and ruf fields add mailto report destinations. The output is a starting configuration, not a live DNS change or a deliverability test.
What parameters it generates in output
| Field | Meaning | Healthy result |
|---|---|---|
| Generated DMARC TXT Record | The complete assembled policy shown in the result header. | It starts with v=DMARC1 and reflects the chosen options. |
| DNS Record Type | The record type for publication. | TXT is displayed. |
| Host / Name | _dmarc joined to the entered domain, or example.com by default. | It matches the DMARC owner required by the DNS provider. |
| Record Value | The generated p, optional pct, optional report tags, sp, adkim, and aspf string. | It matches the reviewed rollout policy. |
| Subdomain Policy | A static explanation of how sp is produced. | Inherited from p is shown. |
FAQs related to that specific tool
What value is used when Domain Name is empty?
The output owner defaults to _dmarc.example.com when no domain is entered.
Why is pct=100 missing from the generated value?
The code omits the pct tag when 100 percent is selected. It only adds pct=50 or pct=25.
How is the subdomain policy chosen?
The generator always adds sp with the same value selected for p, so the output table says it is inherited from p.
Which alignment modes are generated?
The result always appends adkim=r and aspf=r for relaxed DKIM and SPF alignment.
Are reporting addresses validated?
No. Nonblank text is prefixed with mailto: and added to rua or ruf without mailbox or authorization checks.
Does generating a reject policy make it safe to publish immediately?
No. The page creates text only. Review authentication coverage and reports before moving to an enforcement policy.