DMARC Record Generator
Generate a DMARC policy TXT record for your domain with all options explained.
About DMARC Builder
Generates a DMARC policy TXT record, which tells receiving mail servers what to do with messages claiming to be from your domain that fail SPF and DKIM checks — quarantine, reject, or take no action, plus where to send reports. DMARC is what actually turns SPF and DKIM into meaningful anti-spoofing protection. The safe rollout path is starting with p=none (monitor-only) to collect reports and confirm legitimate senders aren't failing, before moving to p=quarantine and eventually p=reject.
The rua tag sets where aggregate summary reports go, while ruf sets forensic per-message failure reports — most receivers only honor rua in practice, since forensic reports contain message content and privacy concerns mean many providers don't send them at all.
Rollout Strategy
Monitor reports for 2-4 weeks.
Move to quarantine at pct=10, increase.
Finally enforce reject at pct=100.