DMARC Record Generator & Checker
Build a DMARC record for your domain. DMARC ties SPF and DKIM together with a policy telling receivers what to do when authentication fails. Required by Google and Yahoo for bulk senders since Feb 2024.
Email Deliverability Intelligence
Google & Yahoo now require DMARC for anyone sending 5,000+ emails/day.
Start with
p=none and aggregate reports for 30 days to see who sends on your behalf. Then move to p=quarantine at pct=25, then pct=100, then p=reject. Jumping straight to p=reject breaks legitimate mail flows every time.
Check existing DMARC
Build DMARC record
Policy settings
Reporting
Generated DMARC record
TXT record at
_dmarc.yoursite.comRollout plan
Deploy
- In your DNS, add a TXT record at host
_dmarc(so FQDN becomes_dmarc.yoursite.com). - Paste the generated record as the value.
- Wait 24-48 hours for propagation and reports to flow.
- Use a DMARC report processor (Postmark, Valimail, EasyDMARC, DMARCian) to make the aggregate reports readable.
- After 30 days, raise policy from
noneandquarantine(pct=25) and quarantine (pct=100) and reject.
Next steps
DMARC enforces SPF + DKIM: set up both first
If SPF or DKIM aren't aligned, DMARC quarantine or reject will drop legitimate mail. Get the base records right before enforcing.
Frequently asked questions
What is DMARC?
Domain-based Message Authentication, Reporting, and Conformance. Policy layer on top of SPF and DKIM. Tells receivers what to do with unauthenticated email.
Is DMARC mandatory?
For bulk senders to Gmail and Yahoo over 5k emails/day: yes since Feb 2024. For everyone else: strongly recommended.
What are the three DMARC policies?
p=none (monitor), p=quarantine (spam folder), p=reject (bounce). Start at none, roll to reject once passing.How to roll out DMARC safely?
Phase 1: p=none, 100% of traffic, collect reports. Phase 2: p=quarantine at 10%, grow to 100%. Phase 3: p=reject.
Where do DMARC reports go?
rua for aggregate, ruf for forensic. Reports arrive as XML. Services like Postmark DMARC Monitor parse them.What is strict vs relaxed alignment?
Strict (
s): header From domain must match SPF/DKIM exactly. Relaxed (r): parent/sub-domain match allowed. Relaxed is default and usually fine.Can I have DMARC without DKIM?
Technically yes but it reduces coverage. SPF-only DMARC fails for forwarded emails. Always add both.
What is BIMI?
Brand Indicators for Message Identification. Requires DMARC at p=quarantine or p=reject. Lets you show your logo in supporting inboxes (Gmail, Yahoo).
How to check my DMARC record?
DNS lookup for
_dmarc.yourdomain.com. Should return the TXT record. The tool's checker validates it.What is DMARC subdomain policy?
sp= specifies policy for subdomains, independent of p= on the apex. Lock subdomains with sp=reject if you don't send from them.What percentage of emails does DMARC apply to?
pct= flag. During rollout set to 10, 25, 50, 100. During full deployment, 100.Free · no account
SEORCE for Chrome, Edge and Firefox
Audits the page you are on: headings, meta tags, schema, indexability, and whether AI crawlers can read it. Export the result as a PDF. Free, with no account.
It audits one page at a time and does not track AI answers. About the extension
Traffic from search and AI
See which visits came from search and AI.
SEORCE Web Analytics runs from one script tag, with Google Search Console connected. It shows visits from every AI source, from search and from campaigns, and it is free on every plan.
3,000+ users · Free forever plan, no card needed