DMARC Generator: Create Your DMARC Record

Key Points

What you'll learn in this article

A DMARC record helps protect your domain from spoofing, phishing, and unauthorized email use.
Easily generate your DMARC record with Mimecast’s DMARC generator using your preferred policy and reporting settings.
A properly formatted DMARC record improves visibility into who is sending email on behalf of your domain.
Mimecast’s DMARC generator helps you create a record you can publish to DNS and use to start collecting DMARC data.

Build your DMARC record

Use Mimecast DMARC generator to build a DMARC record tailored to your domain and policy preferences. Once your record is created, you can publish it in your DNS and begin collecting DMARC data.

Generate a properly formatted DMARC record
Set your preferred DMARC policy
Add reporting destinations for visibility
Prepare your record for DNS publishing

Works for single or multiple domains

If you manage more than one domain, you can use the same process to create multiple DMARC records across each one and monitor them more consistently.

Generate My DMARC Record

How to use Mimecast DMARC record generator

DMARC Analyzer generates a unique email address which matches your account. Please use this email address in your DMARC DNS record. DMARC Analyzer needs to collect data before it can generate any statistics. To collect data in DMARC Analyzer you need to add a DNS record. This tool will help you do that.

Fill in the information below and press ‘generate record’. This tool will generate a DNS record which you can publish to your DNS settings (your domain ISP can do this for you as well). Once this record is published, a daily report will be sent to the specified email address to collect data. You can also have forensic emails (specific erroneous emails) forwarded to this address.

Use the record setup guides for guidance on how to set up your DMARC record for specific web hosts.

Generate My DMARC Record

Get started with DMARC

A properly configured DMARC record helps protect your domain from spoofing or phishing attacks, improves visibility into who is sending on your behalf, and supports stronger email authentication.

Create a new DMARC record

Use the DMARC Record Generator to build a record for your domain based on your preferred reporting and policy settings.

[Generate a DMARC Record]

Validate an existing DMARC record

Already have a DMARC record in place? Use the DMARC Record Checker to confirm it’s valid and formatted correctly.

[Explore DMARC Checker]

Get guided setup help

Need help choosing a policy or publishing your record? Use the DMARC Setup Wizard for step-by-step guidance.

[DMARC Setup Wizard]

Create your DMARC record

Generate your DMARC record now and take the next step toward stronger domain protection. Sign up below for access to guided setup, validation, and ongoing visibility.

Generate My DMARC Record

How to get started with DMARC?

In order to start with DMARC you have to publish a DMARC record into your DNS. A DMARC record contains variables including the preferred DMARC policy . Generating a DMARC record isn’t complex, though it is very important to use the correct syntax as provided in the DMARC standard.

DMARC Analyzer helps users to get the DMARC record generation job done easily with our DMARC record generator or use the DMARC setup wizard to get more guidance on how to create your DMARC record. The free version of DMARC Analyzer allows you to use the DMARC record generator. You can also use the free DMARC record checker to validate your DMARC record; even without signing up.

What Is a DMARC Record Generator?

A DMARC generator is a tool that helps you create a properly formatted DMARC record for your domain. Instead of writing the DNS syntax manually, it builds the record for you based on your policy and reporting preferences. This makes it easier to create a valid DMARC record, avoid formatting errors, and start improving email security faster.

How to implement a DMARC record for a domain?

To implement a DMARC record, first choose the domain you want to protect and decide on your DMARC policy. Then generate the record and publish it as a TXT record in your DNS settings. After that, run a DMARC check to confirm the record is valid and live. Once published, it can begin sending a DMARC report that helps you monitor authentication activity.

What is DMARC domain alignment?

DMARC domain alignment means the domain in the visible “From” address must match the domain used by SPF or DKIM during authentication. This is what supports DMARC authentication and helps confirm that the sender is authorized to use that domain.

If alignment fails, the message may fail DMARC even if some authentication is present. This is why alignment matters for both email deliverability and email security.

What’s the DMARC record format?

A DMARC record is a DNS TXT record made up of tag-value pairs. It usually starts with the version tag, followed by your policy and optional reporting settings. These DMARC tags need to be formatted correctly, which is why many teams use a DMARC record generator to build the record and check that it is valid after publishing.

Can I add a DMARC record without SPF or DKIM?

Yes, you can publish a DMARC record without SPF or DKIM in place, but DMARC will not work properly without at least one of them configured and aligned. That’s because DMARC relies on SPF and DKIM for authentication. For best results, set up those records first or alongside DMARC so your policy can protect legitimate email and support more consistent email deliverability.

Related DMARC Record Generator Resources

Email & Collaboration Threat Protection