DMARC (Domain-based Message Authentication, Reporting, and Conformance) is an email authentication protocol that builds on SPF and DKIM. It tells receiving mail servers what to do when emails fail authentication checks.

What DMARC policy should I start with?

Start with p=none to monitor your email traffic without affecting delivery. Once you've reviewed your DMARC reports and confirmed all legitimate senders are authenticated, move to p=quarantine and eventually p=reject.

Do I need SPF and DKIM before DMARC?

Yes. DMARC relies on SPF and DKIM to authenticate emails. Set up both SPF and DKIM first, then add a DMARC record to define your policy for emails that fail these checks.

What are DMARC aggregate reports?

Aggregate reports (rua) are XML reports sent by receiving mail servers that show you who is sending email from your domain. They help you identify legitimate senders you may have missed and unauthorized use of your domain.

DMARC Record Generator

Generate a DMARC (Domain-based Message Authentication) policy record to protect your domain from email spoofing and phishing.

Fast & Free Privacy-First No Sign-up Required

Domain

DMARC Policy

none — Monitor only

No action taken, just collect reports

quarantine — Send to spam

Failing emails go to the spam folder

reject — Block entirely

Failing emails are rejected outright

Subdomain Policy

Aggregate Report Email (rua)

Forensic Report Email (ruf)

Policy Percentage: 100%

Percentage of emails to apply the policy to. Start at 10% when moving from "none" to "quarantine".

SPF Alignment

DKIM Alignment

Your DMARC Record

DMARC TXT Record

v=DMARC1; p=none

Frequently Asked Questions

Related Tools

SPF Record Generator
DKIM Record Checker
Email Subject Line Tester
HTML Email Previewer

View All Tools →

Send Emails with AI

AISend uses AI to optimize deliverability, route across providers, and generate templates. 1,000 emails/month free.

Try AISend Free