100% Client-Side EngineZero data storage • No email signup required • 2026 Google & Yahoo Bulk Sender Compliant
DMARCPro
Support Project

DMARC Record Generator

Assemble RFC 7489 compliant email authentication records instantly • 100% Client-Side Privacy

Zero Data Retention

Trusted by over 40,000+ domain owners, sales reps & engineers worldwide

★★★★★
4.9 / 5· Independent Deliverability Rating
RFC 7489Strict Standard
Google & Yahoo2026 Compliant
100% Client-SideZero Data Stored
Cloudflare DoHReal-time DNS
1-Click Provider Presets

Popular Email Service Provider Setup Guides

Official SPF include syntax, 10-lookup costs, and DMARC enforcement policies.

Explore All Guides
Business Email Suite4 lookups

Google Workspace (Gmail)

include:_spf.google.com
Business Email Suite1 lookup

Microsoft 365 / Exchange Online

include:spf.protection.outlook.com
Transactional Email API1 lookup

Twilio SendGrid

include:sendgrid.net
Cloud Email Infrastructure1 lookup

Amazon SES (Simple Email Service)

include:amazonses.com
Transactional Email API1 lookup

Mailgun

include:mailgun.org
Transactional Email Delivery1 lookup

Postmark

include:spf.mtasv.net
E-commerce Marketing1 lookup

Klaviyo

include:klaviyomail.com
Marketing & CRM Suite1 lookup

Brevo (formerly Sendinblue)

include:spf.brevo.com
Email Security Basics

What is a DMARC record?

A DMARC (Domain-based Message Authentication, Reporting, and Conformance) record is a DNS TXT entry published under _dmarc.yourdomain.com. It instructs receiving mail transfer agents (like Gmail, Microsoft 365, and Yahoo) on how to handle emails that fail SPF or DKIM authentication.

Without a published DMARC record, cybercriminals can easily forge your domain name in phishing attacks, damaging your domain reputation and causing your legitimate cold outreach and marketing emails to be blacklisted.

Protects your domain from direct spoofing and CEO impersonation
Ensures high email deliverability into primary inbox folders
Sends daily XML diagnostic reports detailing who is sending email as your brand
Domain Authentication HealthProtected
SPF Alignment100% Pass
DKIM Signature99.4% Pass
DMARC Enforcement (p=reject)Active
Google & Yahoo 2026 Bulk Sender Status: PASSED
Authentication Flow Diagram
1. DNS Zone (_dmarc TXT)
↓
2. SPF & DKIM Alignment Check
↓
3. Recipient Gateway: Primary Inbox

How to Create a DMARC Record in 3 Steps

1
Generate Your SyntaxUse our generator above to select your policy mode (start with p=none for monitoring) and add your reporting email address.
2
Publish to Your DNS ProviderLog in to GoDaddy, Cloudflare, Namecheap, or Route 53. Create a new TXT record with Host _dmarc and paste the generated value.
3
Verify and Graduate to EnforcementUse our Live Inspector tab to confirm global propagation. Once your reports show zero false positives, graduate your policy to p=quarantine or p=reject.
Recommended Deliverability Stack

DMARC is Configured. What’s Next for 99% Inbox Placement?

Even with valid DNS authentication, Google and Yahoo enforce strict daily limits. Leading sales teams use automated warmup platforms to safeguard their sender score.

Disclosure: Some links on this page are affiliate links. If you make a purchase through them, we may earn a commission at no additional cost to you. We only recommend tools that meet strict deliverability and security standards.
Recommended by DMARCPro
Best for Cold Outreach & Lead Gen

Instantly.ai

Automated Inbox Warmup & Unlimited Accounts

Configuring DMARC is only step one. If your sending domain is new, you need automated peer-to-peer warmup to hit the primary inbox and prevent spam placement.

Unlimited email accounts warmup
B2B lead database with 160M+ verified contacts
98% deliverability guarantee
Special Partner Free Trial Included
Try Instantly for Free
Best for Sales Agencies

Smartlead.ai

Multi-Channel Outreach & Dynamic Mailbox Rotation

Automatically cycle through multiple secondary domains and mailboxes to distribute daily send volume and protect primary domain reputation.

Unlimited mailbox warmup
Smart IP & domain rotation
Consolidated unibox management
Official Business Email

Google Workspace

Set up pristine @yourcompany.com accounts

Sending cold sales outreach from your primary domain risks your business email. Set up clean, dedicated secondary domains on Google Workspace with 10% off.

Industry standard 99.9% uptime
Full Gmail interface & security
1-click SPF & DKIM DNS integration
Special 10% Off Promo Code Included
Get Google Workspace (10% Off)
Documentation & FAQ

Frequently Asked Questions

Everything you need to know about RFC 7489 syntax, policy enforcement, and 2026 inbox deliverability.

DMARC Tag Explanations (RFC 7489)Reference
TagTag Explanation
v=DMARC1Protocol version identifier. Must be the first tag in the TXT record.
pPolicy for the organizational domain. Valid values: none (monitoring), quarantine, reject.
ruaMailto URI list for aggregate feedback reports (e.g. rua=mailto:dmarc@yourdomain.com).
rufMailto URI list for message-specific forensic failure reports.
spSubdomain policy. Applies policy to all subdomains of the root domain.
pctPercentage of messages from 1 to 100 to subject to policy enforcement.
adkimDKIM alignment mode. "r" for relaxed (subdomains pass), "s" for strict.
aspfSPF alignment mode. "r" for relaxed, "s" for strict.
foForensic reporting options. 0 (all mechanisms fail), 1 (any fail), d (DKIM fail), s (SPF fail).
A DMARC Record Generator is a specialized utility that helps domain administrators construct syntactically valid DMARC TXT records according to RFC 7489 specifications. It prevents manual configuration errors that could lead to dropped emails or DNS propagation failures.