Wrong host
The host is _dmarc, not @.
Tools · Generator
DMARC record generator
Choose a policy and a report address, then copy a valid DMARC record and the host to put it on.
Add this TXT record
- Type
- TXT
- Host / name
_dmarc- Value
After you publish it, check your domain. DNS changes can take up to an hour to show.
Start with monitoring, end with protection
A DMARC record tells inbox providers what to do with email that fails SPF and DKIM, and where to send reports. Start with p=none so nothing is blocked while you read the reports, then tighten.
Gmail and Yahoo require at least p=none from bulk senders since February 2024.
Publish it in four steps
- CopyCopy the record from the generator.
- AddIn your DNS host, add a TXT record with host _dmarc.
- WaitReports start arriving within a day or two.
- TightenAfter 2 to 4 weeks of clean reports, come back and switch to quarantine, then reject.
Before you publish
Report inbox flooding
Use a separate address or a reporting service; large senders get many reports.
Reject on day one
A forgotten tool’s email is then blocked. Start with none.
Gmail and Yahoo sender rules
What inbox providers require since February 2024
Bulk senders send about 5,000 or more emails a day to Gmail. Cold email teams reach that quickly across mailboxes, so treat the bulk rules as the standard.
Source: Google email sender guidelines
| Rule | Who | Requirement |
|---|---|---|
| SPF or DKIM | All senders | Required |
| SPF and DKIM | Bulk senders | Required |
| DMARC, p=none or stronger | Bulk senders | Required |
| From domain aligned with SPF or DKIM | Bulk senders | Required |
| One-click unsubscribe | Bulk senders, marketing email | Required |
| Spam complaint rate | All senders | Below 0.3 percent |
Questions people ask
How do I create a DMARC record?
Choose p=none, add an address for reports, and copy the record into a TXT record with host _dmarc on your domain.
What policy should I start with?
p=none. Read the reports for two to four weeks, fix any sender that fails, then move to quarantine and reject.
Do I need SPF and DKIM first?
You can publish DMARC first in monitor mode; the reports show what fails. To pass DMARC an email needs SPF or DKIM to pass and match your From domain.
What host do I use?
_dmarc. Some DNS hosts need the full name, _dmarc.yourcompany.com.