DMARC record generator
A DMARC record tells inbox providers what to do with email that fails SPF or DKIM, and where to send reports. Choose a policy and a report address below, and the tool builds the TXT record to publish at _dmarc.yourdomain.com.
Tools
v=DMARC1; p=none; rua=mailto:[email protected]_dmarc.yourdomain.com.What each tag does
p= requests handling for mail that fails DMARC. none requests no specific action, quarantine asks receivers to treat it as suspicious, and reject asks receivers not to deliver it. Receivers can still apply their own policy.
rua= lists the addresses participating receivers can use for aggregate reports, written as mailto: URIs.
t=y marks the policy as testing and asks receivers not to apply its enforcement policy. Remove it when you are ready to enforce p= or sp=.
sp= sets a separate policy for subdomains. Leave it inherited and subdomains follow p=.
adkim= and aspf= control alignment strictness. Relaxed alignment accepts authenticated domains with the same Organizational Domain as the From: address. Strict alignment requires an exact match. The tool only writes adkim=s or aspf=s when you switch to strict.
From monitoring to enforcement
Publish p=none with a report address first. Aggregate reports from participating receivers can show which mail streams use your domain and whether they pass DMARC. Fix legitimate mail streams before switching to p=quarantine or p=reject. If Loops is your only sender, there are fewer sources to verify, but allow enough time to collect reports.
Loops provides a ready-to-copy default DMARC record during domain setup, so you already have a working record. Use this generator when you want to set your own policy, report address, or alignment.
FAQ
Where do I put the record?
Which policy should I start with?
Can reports go to an address on a different domain?