DMARC Record Generator
Stop scammers from impersonating your domain. Answer a few plain-English questions and we'll build a standards-compliant DMARC record you can paste straight into your DNS.
- 1 Your domain
- 2 Protection level
- 3 Reports
Step 1 — Your domain
Which domain do you want to protect? This is usually the part after the @ in your email address.
Enter your bare domain (like mybusiness.com) — no https:// or www.
Step 2 — How strict?
Tell receiving mail servers what to do with email that fails the check. You can always tighten this later.
New to DMARC? Start with Just watch for a few weeks, read your reports, then move to Send to spam and finally Block it.
Step 3 — Where do reports go?
Mailbox providers send daily summaries of who's sending on your behalf. Pick an address you'll actually read (a dedicated inbox works well).
Aggregate reports (rua) are sent here once a day. They're machine-readable — tools like Postmark's free DMARC monitor make them easy to digest.
What is DMARC, in plain English?
DMARC (Domain-based Message Authentication, Reporting & Conformance) is a public note in your domain's DNS that tells the world's mail servers two things: how to check that an email really came from you, and what to do when one doesn't.
It builds on two older standards — SPF (which servers are allowed to send for you) and DKIM (a cryptographic signature). DMARC ties them together with alignment: the visible "From" address has to match what SPF or DKIM verified. That's what stops a scammer from putting your domain in the From line.
You also get reports. Every day, providers like Google and Microsoft tell you who is sending mail using your domain — legitimate services and impersonators alike — so you can see what's really happening before you turn on enforcement.
DMARC questions
Yes. DMARC checks whether SPF or DKIM passed and aligns with your From address, so both should be in place first. If you host with Magic Pages, our SPF generator sorts out SPF in seconds, and DKIM is set up for you automatically.
We don't recommend it. Jumping straight to p=reject can silently block legitimate mail from services you forgot about. Start with Just watch, read a couple of weeks of reports, then tighten gradually. Our generator nudges you in that direction.
As a TXT record on the host _dmarc (so the full name is _dmarc.yourdomain.com) in your domain's DNS settings. The generator gives you the exact host and value to paste, with copy buttons for both.
DNS changes usually propagate within a few minutes, but can take up to 48 hours depending on your provider. Your first daily reports will start arriving the day after the record goes live.
Hosting your Ghost site with us? We'll happily set this up for you.
Ready to Publish? A snap of your fingers – and you're live!
Join 1,400+ publishers who chose Magic Pages as the home for their Ghost site.
Live in 5 minutes
Personal support from our team
All Ghost features included
14-day free trial, no credit card
No credit card required
I personally guarantee you'll love the experience, or I'll help you find a better solution.
— Jannis, Founder of Magic Pages
