What DMARC policy should I start with?

Start with p=none and a valid rua= reporting address. This lets you monitor who is sending under your domain without affecting delivery. After 30-90 days of reviewing reports and confirming all legitimate senders pass authentication, move to p=quarantine at pct=10, then gradually to p=reject.

Where do I add the generated DMARC record in DNS?

Add the generated TXT record at _dmarc.yourdomain.com (not the domain root). The host/name field should be _dmarc and the type should be TXT. The value is the generated record starting with v=DMARC1.

What email address should I use for rua= DMARC reports?

Use a dedicated email address you monitor, like dmarc-reports@yourdomain.com. Aggregate reports are XML files sent daily by Gmail, Yahoo, and other receivers. Many organizations use a DMARC report processing service to parse these automatically.

DMARC Record Generator — Build DMARC Records Free

Build a valid DMARC TXT record. New senders should start with p=none and escalate to reject over 90 days.

Domain

Policy (p=)

Aggregate report email (rua=)

Percentage (pct=)

Subdomain policy (sp=)

DKIM alignment (adkim=)

DNS Record Host _dmarc.yourdomain.com TXT Record Value

v=DMARC1; p=none;

DMARC Record Generator: Build Your Policy the Right Way

Creating a DMARC record manually requires understanding the specific syntax of each tag. This generator builds a syntactically correct DMARC TXT record from your choices, ready to copy and paste into your DNS. The generated record includes all critical tags while omitting optional ones you haven't configured.

DMARC Tag Reference

Tag	Required	Description
`v=DMARC1`	Yes	Version identifier — must be first
`p=`	Yes	Policy: none, quarantine, or reject
`rua=`	Strongly recommended	Aggregate report recipients (mailto:)
`pct=`	Optional	Percentage of failing mail to apply policy to (default 100)
`sp=`	Optional	Subdomain policy override
`adkim=`	Optional	DKIM alignment: r (relaxed, default) or s (strict)

After publishing, verify with the DMARC Checker. Monitor aggregate reports at the rua= address to understand your sending landscape before increasing policy enforcement.