Skip to content

Tools · Published 2026-10-31

What DMARC record should I publish?

Publish one TXT record at _dmarc, starting with v=DMARC1 and p=none, then move to quarantine and then reject.

Name _dmarc.example.com

v=DMARC1; p=none; pct=100; adkim=r; aspf=r

Policy
p=none asks receivers to deliver the mail and to send you reports. Start here.
Percentage
pct=100 applies the policy to 100 percent of failing mail.
Aggregate reports
No aggregate report address is set, so rua is left out.
Failure reports
No failure report address is set, so ruf is left out.
DKIM alignment
adkim=r is relaxed DKIM alignment: a subdomain of the From domain passes.
SPF alignment
aspf=r is relaxed SPF alignment: a subdomain of the From domain passes.
Subdomains
No subdomain policy is set, so subdomains use the same policy as the domain.

Publish p=none and read the reports. Move to p=quarantine once your own mail passes, then to p=reject.

After you publish it, check the domain with the DNS check.

Publish one TXT record at _dmarc. plus your domain, whose value starts with v=DMARC1 and holds p=none until the reports show your own mail passes. The generator writes the name and the value in the browser. Nothing is sent, and no account is required.

pct defaults to 100, which applies the policy to all failing mail. Lower it only while you are moving from p=none to a stricter policy. rua is the address that receives aggregate reports. ruf receives failure reports. Relaxed alignment (adkim=r and aspf=r) lets a subdomain of the From domain pass; strict alignment requires the exact domain.

Publish p=none and read the reports. Move to p=quarantine once your own mail passes, then to p=reject.

After it is published, confirm the record with the DNS check. Count SPF lookups with the SPF lookup checker. The bounce decoder reads a diagnostic, and the budget calculator turns a monthly volume into a key ceiling.