← All Docs

DMARC Builder

Build a valid DMARC TXT record to protect your domain from email spoofing. Configure policy, reporting, alignment, and subdomain handling.

Try DMARC Builder →

What It Does

The DMARC (Domain-based Message Authentication, Reporting & Conformance) Builder generates a valid DMARC TXT record for your domain. DMARC tells receiving mail servers what to do with email that fails SPF or DKIM checks — monitor it, quarantine it, or reject it outright.

How to Use It

  1. Navigate to DNS Tools → DMARC Builder from the top menu.
  2. Enter your domain name.
  3. Select a domain policy (none, quarantine, or reject).
  4. Optionally set a subdomain policy if different from the main domain.
  5. Set the percentage of failing email the policy applies to (use less than 100% for gradual rollout).
  6. Enter an email address for aggregate reports (rua) — strongly recommended.
  7. Optionally enter an address for forensic reports (ruf).
  8. Choose DKIM and SPF alignment mode (relaxed or strict).
  9. Click Generate DMARC Record.
  10. Copy the record and publish it as a TXT record at _dmarc.yourdomain.com.

Recommended Rollout Strategy

  1. Start with p=none: Monitor for 2-4 weeks. Review aggregate reports to identify all legitimate senders.
  2. Move to p=quarantine at 10%: Gradually increase the percentage as you confirm legitimate mail passes.
  3. Increase to p=quarantine at 100%: All failing email goes to spam.
  4. Final: p=reject: Unauthorized email is blocked entirely. This is the target state.

Use Cases

  • Anti-spoofing: Prevent attackers from sending email that appears to come from your domain.
  • Email deliverability: DMARC helps legitimate email reach inboxes by proving domain ownership.
  • Compliance: DMARC is required by many regulatory frameworks and email providers (Google, Yahoo require it since 2024).
  • Visibility: Aggregate reports show who is sending email as your domain — both legitimate and fraudulent.