Looply

Free tool, no signup

Free DMARC record generator

Choose a policy and where reports should go, then copy a DMARC record that follows the current standard, RFC 9989. Everything runs in your browser.

Runs in your browserNothing is storedFollows RFC 9989 (2026)
Policy for mail that fails DMARC (p)

A mailbox you read, or your DMARC report service’s address. Separate several with commas.

Your DMARC record

Type
TXT
Name
_dmarc
v=DMARC1; p=none
  • Note: p=none is monitoring only: failing mail is still delivered and you get reports. It meets the Gmail, Yahoo and Outlook.com minimum for bulk senders.
  • Needs work: No report address, so receivers send no aggregate reports and you cannot see who sends mail as your domain.

Add it as a TXT record at your DNS host. A domain has one DMARC record: replace any existing one instead of adding a second.

Check a domain’s live DMARC record

How to create your DMARC record

  1. Enter your domain. The record’s name and a report address fill in for you.
  2. Pick p=none for a domain that has no DMARC yet. It changes nothing for your mail and starts the reports.
  3. Check the report address. The mailbox must exist, or use the address your DMARC report service gives you.
  4. Copy the value and add it as a TXT record named _dmarc at your DNS host. Replace any DMARC record that is already there.
  5. Run the DMARC checker to confirm the live record.

What each tag means

TagWhat it does
v=DMARC1Required, and always first.
p=What receivers should do with mail that fails: none, quarantine (spam folder) or reject.
sp=A different policy for subdomains. Without it, subdomains follow p.
rua=Where aggregate reports go. Without it, receivers send no reports.
adkim=, aspf=Alignment. Relaxed (r, the default) accepts subdomains of your domain; strict (s) needs an exact match.
t=yTest mode: receivers apply one level lower. It has no effect on p=none.
pct=Removed by RFC 9989 in May 2026. The generator never adds it.

Before you switch to quarantine or reject

A message passes DMARC when SPF or DKIM passes for a domain that matches the From address. A stricter policy only hurts mail from services that are not set up yet, so find them first:

  1. Read the reports for a few weeks and list every service that sends as your domain: your mailbox provider, your cold email tool, your CRM, billing, support.
  2. Set up DKIM on your domain in each one, so it passes and aligns.
  3. Move to p=quarantine, with t=y first if you want a gentle start.
  4. When the reports show no legitimate mail failing, move to p=reject.

Who asks for DMARC

Gmail asks senders of more than 5,000 messages a day for SPF, DKIM and a DMARC record, and p=none is enough. Yahoo asks bulk senders for a DMARC policy of at least p=none that passes. Outlook.com asks the same of domains that send it 5,000 or more messages, and rejects the rest with error 550 5.7.515.

Cold email from several inboxes on one domain adds up quickly. A sending subdomain needs its own SPF and DKIM, but follows its parent’s DMARC record unless you publish one for it. A separate domain needs all three.

Questions

Frequently asked questions

Where do I add the DMARC record?

At your DNS host, often the company you bought the domain from. Add a TXT record named _dmarc (some hosts want the full name, _dmarc.yourdomain.com) and paste the value. Then run the DMARC checker to see the live record.

Which policy should I start with?

p=none, with a report address. Google and Microsoft both advise starting at none, then moving to quarantine and reject once reports show only your own services. Gmail, Yahoo and Outlook.com accept p=none from high-volume senders.

Why is there no pct option?

RFC 9989, published in May 2026, replaced the original DMARC specification (RFC 7489) and removed pct. Google’s and Microsoft’s help pages still show pct=100 in their examples; leaving it out changes nothing, because 100 was the default. For a trial run, use t=y.

Can I publish two DMARC records?

No. When a name has more than one DMARC record, receivers discard all of them, as if you had none. Keep one record at _dmarc and edit it when you change your policy.

Can reports go to an address on another domain?

Yes, if that domain agrees: it must publish a TXT record v=DMARC1 at yourdomain.com._report._dmarc.theirdomain.com (RFC 9990). DMARC report services set this up for their customers.

Official sources

What this page is based on

Checked October 27, 2026. Mailbox providers change their rules; the linked pages are authoritative. This tool reads public DNS only and is not a guarantee of inbox placement.

More free tools

DMARC checkerCheck your DMARC policy, reports and RFC 9989 issues, with a copy-ready fix.SPF checkerSee your SPF record, count its DNS lookups against the limit of 10 and catch errors.DKIM checkerFind your DKIM keys under common selectors and check their size.SPF record generatorBuild one SPF record for your senders, with a live count of DNS lookups against the limit of 10.Email spam word checkerPaste a cold email to flag spam-trigger phrases, missing personalization and risky formatting.Cold email templates40 signal-based examples and the 2026 Gmail, Yahoo and Outlook sender rules.

Your domain is ready. Who should you email?

Looply finds people showing buying signals, scores them against your ideal customer profile and sends personalized cold email from your own connected inboxes.

Try Looply free for 7 days