Question 1

How do I create a DMARC record?

Accepted Answer

Use our free DMARC Policy Generator tool above to create a DMARC record. Enter your domain, select your policy level (none, quarantine, or reject), add email addresses for reports, and we'll generate the proper DNS TXT record format (v=DMARC1; p=...). Start with p=none for monitoring, then move to p=quarantine or p=reject for enforcement.

Question 2

What DMARC policy should I use?

Accepted Answer

Start with p=none to monitor your email authentication without affecting delivery. After analyzing reports for 2-4 weeks and fixing any issues, move to p=quarantine (sends failed emails to spam). Once confident all legitimate email passes, implement p=reject for maximum protection. Never start with p=reject without monitoring first, as it can block legitimate email.

Question 3

What is the difference between RUA and RUF in DMARC?

Accepted Answer

RUA (rua=) specifies where to send aggregate reports - daily XML summaries of all authentication results across your email traffic. RUF (ruf=) specifies where to send forensic reports - individual failure samples with message details. RUA is essential for monitoring, while RUF is optional and contains sensitive data. Most organizations only use RUA reports.

Question 4

Do I need separate DMARC records for subdomains?

Accepted Answer

No, by default your main domain's DMARC policy applies to all subdomains. However, you can create separate DMARC records for specific subdomains if needed, or use the sp= tag in your main record to set a different policy for subdomains. For example: v=DMARC1; p=reject; sp=quarantine applies reject to the main domain but quarantine to subdomains.

Question 5

Where do I publish my DMARC record?

Accepted Answer

Publish your DMARC record as a DNS TXT record at _dmarc.yourdomain.com. In your DNS provider's control panel, create a new TXT record with the name '_dmarc' and paste the generated DMARC record as the value. DNS propagation typically takes 15 minutes to 48 hours. Use our DMARC Analyzer to verify it's published correctly.

DMARC Policy Generator

Policy Settings

Generated DMARC Record

Frequently Asked Questions

Related Tools

DMARC Analyzer

SPF Surveyor

DKIM Validator

Help & Resources

About DMARC Policy Generator

What You Can Do