DMARC Record Generator

Answer two questions, get a correct DMARC TXT record to paste into your DNS — no account needed.

Your domain (optional — just for showing the exact host to publish under)

What should happen to mail that fails?

Just monitor for nowNothing is blocked — you only collect reports. The safe starting point if you've never had DMARC before.

Send suspicious mail to spamMail that fails SPF or DKIM alignment is quarantined, not delivered normally.

Block suspicious mail outrightThe strictest option — failing mail is rejected outright. Only move here once monitoring shows your real mail passes cleanly.

Where should aggregate reports go?Deliver reports to SendClear (reports@in.sendclear.io) instead of your own inbox, so we can translate them into plain English automatically — uncheck this to get raw XML at your own address instead

Publish this as a TXT record

_dmarc.yourdomain.com

v=DMARC1; p=none; rua=mailto:reports@in.sendclear.io

Why does this mention sendclear.io? DMARC reports are delivered by email — Google, Microsoft, and other mailbox providers send them to whatever address is in this record. Pointing it at SendClear's inbox (rather than yours) is what lets us read and translate them into plain English for you. It's just a mailbox that receives reports — it doesn't give SendClear any other access to your domain, your mail, or anything else. Uncheck the box above at any time to have reports go straight to your own inbox instead, as raw XML.

Once it's live (DNS changes can take a few hours to propagate), check it with the free instant checker to confirm it's reading correctly. If you chose SendClear's report address, reports only get translated into plain English once you've also started monitoring this domain (the 14-day trial covers it) — pointing rua= here alone gets reports flowing, but we need to know the domain's yours before translating what arrives.

Not sure what DMARC actually does first? Check your domain's current setup free to see where you stand.