DMARC Record Generator

Domain:

Policy Type:

None (Monitoring)

Quarantine

Reject

Aggregate Email:

Subdomain Policy:NoneQuarantineReject

SPF Identifier Alignment:RelaxedStrict

DKIM Identifier Alignment:RelaxedStrict

Reporting Interval (Seconds):

Percentage Applied to:

Forensic Email:

Failure Reporting Options:

DKIM and SPF don't pass or align

DKIM or SPF don't pass or align

DKIM doesn't pass or align

SPF doesn't pass or align

Generate DMARC Record

What is DMARC?

DMARC, an acronym for "Domain-based Message Authentication, Reporting, and Conformance," is an email authentication protocol that allows email domain owners to protect their domains against unauthorised use, often known as email spoofing. The major goal of installing DMARC is to prevent a domain from being used in business email compromise attacks, phishing emails, email scams, and other cyber threat activities.

How does DMARC work?

Here’s how DMARC works:

• Alignment with SPF and DKIM: DMARC uses two current email authentication methods: SPF (Sender Policy Framework) and DKIM (Domain Keys Identified Mail). SPF enables senders to specify which IP addresses are permitted to send mail for a specific domain, whereas DKIM gives an encryption key and digital signature to ensure that an email message was not forged or altered.
• Policy Definition: The domain owner configures a DMARC entry in their DNS records. This DMARC record specifies the rules that the email receiver should follow when dealing with emails claiming to be from that domain. The policy can instruct the recipient to do nothing (none), quarantine the message (mark it as suspect), or reject the message completely.
• Reporting: DMARC also describes how receivers might notify senders when messages pass or fail DMARC review. These reports can help the sender's domain owner gain visibility into the email flow and determine whether and how their domain is being exploited in email attacks.

DMARC Record Syntax