Free tool

DMARC record generator

Gmail, Yahoo, and Outlook require bulk senders to publish DMARC — p=none is enough to comply and starts the flow of aggregate reports showing who sends as your domain. Build the record below; it updates as you type.

Your domainReports go to (rua) — comma-separatedPolicy (p)Subdomain policy (sp, optional)Percent of mail policed (pct)

Strict DKIM alignment (adkim=s)Strict SPF alignment (aspf=s)

No valid rua address yet — without one you get zero visibility into who is sending as your domain. Add a mailbox you can read.

TXT record on _dmarc.yourdomain.com

v=DMARC1; p=none

p=none satisfies Gmail/Yahoo/Outlook's minimum requirement and is the right start. After 2–4 weeks of clean reports, move to quarantine, then reject.

After publishing

Verify it's live with a readiness scan (DNS changes can take minutes to propagate).
Reports start arriving at your rua mailbox within 24–48 hours as XML attachments.
Fix any legitimate source that fails alignment, then ratchet: none → quarantine → reject. MailBaseline's Growth plan parses the XML for you.

Establishing signal

After publishing

Verify it's live with a readiness scan (DNS changes can take minutes to propagate).

Reports start arriving at your rua mailbox within 24–48 hours as XML attachments.

Fix any legitimate source that fails alignment, then ratchet: none → quarantine → reject. MailBaseline's Growth plan parses the XML for you.