Free tool

DMARC record generator with a rollout plan

A DMARC record is a TXT record at _dmarc.yourdomain.com that tells receivers what to do with mail that fails SPF and DKIM alignment and where to send reports, for example v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com.

Your domain

Optional. Read the record it has now to start from it and see the next stage.

Policy: where you are in the rollout

Start at Monitor and move one stage at a time once the reports show every sender passing.

Where reports go

Aggregate reports (rua) show every server that sends as your domain. Use a mailbox you read or a DMARC report service.

Subdomains and alignment

Leave these as they are unless you have a reason; the defaults suit most domains.

Existing subdomains (sp)
Subdomains that do not exist (np)
DKIM alignment (adkim)
SPF alignment (aspf)
Your DMARC record

v=DMARC1; p=none

  • Type
    TXT
    Name
    _dmarc
    TTL
    3600

    Value: the record above

    Enter _dmarc in most DNS panels

  • Notep=none: monitoring mode. It meets the Gmail, Yahoo and Outlook requirement for bulk senders and changes no delivery; spoofed mail is not stopped yet.
  • WarningNo rua address: receivers send no aggregate reports, so you cannot see which servers send as your domain or when it is safe to raise the policy.

Stage 1 of 4: Monitor

Next: Test quarantine (weeks 5 and 6) when every service you send from passes SPF or DKIM aligned with your From domain in the aggregate reports.

Where to enter it at your DNS host
  • Cloudflare: Type TXT, Name _dmarc, Content the value, TTL Auto
  • GoDaddy: Add New Record, Type TXT, Name _dmarc, Value the value, TTL 1 hour
  • Namecheap: Advanced DNS, Add New Record, TXT Record, Host _dmarc, Value the value
  • Route 53: Create record, Record name _dmarc, Type TXT, value in double quotes; split values over 255 characters into quoted parts
  • Google Cloud DNS, Squarespace and others: Host _dmarc, or the full name _dmarc where the panel asks for it; one TXT record with the value
  • Changes show up within the TTL, usually minutes; some hosts take up to an hour to publish.

Send the record to your DNS admin

We email the record, its name and TTL, and the findings above, so whoever manages DNS can paste it as is.

Setting up domains for cold email?

Outreach2day buys the domains, sets SPF, DKIM and DMARC on each one and creates warmed-up mailboxes: $2.50 a mailbox a month, 12 minimum. From 1,000 mailboxes we quote a volume price on a call.

Create mailboxesTalk to our deliverability team

About this tool

About the DMARC record generator

Pick your stage and report address above and copy the record.

Start at p=none with a report address, read the reports for a few weeks, then move to quarantine and reject one stage at a time. The generator follows RFC 9989, the DMARC standard published in May 2026, and shows the next stage for the record you have.

How it works

What each tag does

  • v=DMARC1 first, then p: none (report only), quarantine (spam folder) or reject (refuse the message)
  • rua: where receivers send daily aggregate reports, one or more mailto: addresses; without it you get no reports
  • ruf: where message-level failure reports go; they can carry headers and parts of the message, and many large mailbox providers, Gmail among them, send none
  • sp: the policy for existing subdomains; np: the policy for subdomains that do not exist, which stops spoofing from subdomain names nobody created
  • adkim and aspf: relaxed (r, the default) passes when the DKIM or SPF domain shares the organisational domain with the From address; strict (s) needs an exact match
  • t=y: test mode from RFC 9989; receivers apply one level lower (quarantine is handled as none, reject as quarantine) while you watch the reports
  • pct, rf and ri are historic in RFC 9989; receivers still on RFC 7489 read pct=0 the way t=y is meant, so the generator can write both
  • Name: _dmarc in most DNS panels (the full name is _dmarc.yourdomain.com); TTL 3600

Background

The rollout from none to reject

Week 1 to 4, p=none with rua: the reports list every server that sends as your domain. Fix each legitimate one until it passes SPF or DKIM aligned with your From domain. RFC 9989 notes this can take months for a domain with many senders.

Week 5 and 6, p=quarantine with t=y: receivers still deliver as with none, and forwarders and mailing lists that rewrite the From address show up in the reports. Week 7 to 10, p=quarantine: mail that fails DMARC goes to spam.

Week 11 on, p=reject: only once every stream is DKIM signed. RFC 9989 section 7.4 says a reject domain must not rely on SPF alone, because forwarding breaks SPF, and advises against reject for domains whose people post to mailing lists. A cold email domain that only sends from its mailboxes can usually stop at quarantine or go to reject.

The timings are ours. Move up only when the reports for the current stage are clean, and step back a stage if a legitimate sender starts failing.

Background

What Gmail, Yahoo and Outlook require

Bulk senders to Gmail, Yahoo and Outlook.com need a DMARC record; p=none meets the requirement, together with SPF and DKIM on the sending domain. The details per provider are in SPF, DKIM and DMARC for cold email.

DMARC passes when SPF or DKIM passes for a domain aligned with the From address. Build the SPF record with the SPF record generator and check all three records on the live domain with the SPF, DKIM and DMARC checker.

The DMARC checker reads the published record and explains each tag.

Reading the aggregate reports and fixing alignment failures: SPF, DKIM and DMARC test.

Free guide19 min read

Send 100,000 cold emails a month

Domains and mailboxes you need, DNS, warm-up, lists, copy and follow-ups, with a launch checklist, sent to your inbox.

Unsubscribe in one click.

Questions

How do I create a DMARC record?

Publish a TXT record at _dmarc.yourdomain.com that starts with v=DMARC1 and a policy, for example v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com. The generator above builds it for the stage you pick.

Which DMARC policy should I start with?

p=none with a rua address. It changes no delivery and sends you reports, so you can find every service that sends as the domain before you move to quarantine.

When should I move from p=none to quarantine and reject?

When the aggregate reports show every legitimate sender passing SPF or DKIM aligned with your From domain for at least two weeks. Test with p=quarantine; t=y first, then quarantine, then reject once every stream is DKIM signed.

Can DMARC reports go to an address on another domain?

Yes, if that domain authorises it: it publishes a TXT record v=DMARC1; at yourdomain.com._report._dmarc.<its domain>. DMARC report services set this up for their customers; for your own second domain, add it yourself. The generator shows the record.

What does pct do in DMARC?

In RFC 7489 pct applied the policy to a share of failing mail. RFC 9989 made it historic because receivers applied values other than 0 and 100 unevenly, and replaced pct=0 with t=y (test mode).

Can I add a DMARC record without SPF or DKIM?

You can publish it, but every message then fails DMARC, and at quarantine or reject your own mail goes to spam or bounces. Set up SPF and DKIM first, or start at p=none.

In your AI assistant

Run the same checks in Claude or ChatGPT

Free SKILL.md files with the rules behind this tool. Install them in Claude or Claude Code, or paste them into ChatGPT, Gemini, Grok or Cursor.

Mailboxes, warm-up and sending in one place

$2.50 a mailbox a month. DNS records are set for you, and every mailbox shows its warm-up numbers from day one.

Create mailboxesBook a call

Deliverability call

Talk to our deliverability team

Book a call with the people who run our mailbox infrastructure. We look at your current setup and tell you what to change. Running 1,000+ mailboxes? We also quote a volume price below every vendor list price in our comparisons, warm-up and sending included.

  • Review your domains, DNS records and current inbox placement
  • Size the setup: domains, mailboxes per domain and daily volume per mailbox
  • Plan warm-up and the move from your current provider or sequencer
  • 1,000+ mailboxes: a volume price per mailbox for your setup

Free call

See open times in your time zone and book on this page.

Or open the booking page