Aller au contenu
Lancer un projet
Email & DNS

DMARC Record Generator

Create a DMARC policy record step by step – from monitoring (p=none) to full protection (p=reject) – with reporting addresses and alignment.

Fills in the full record name and checks report addresses.
Only used with a failure-report address. Many receivers no longer send these.
Fonctionne dans votre navigateur – rien n’est envoyé ni enregistré.

DMARC ties SPF and DKIM together and tells receiving servers what to do with mail that fails – and it sends you reports showing who is sending as your domain. Build the record step by step and follow the safe roll-out path from monitoring to full protection.

The safe roll-out

  1. p=none with a rua address – collect reports for 2–4 weeks.
  2. Fix every legitimate sender that fails (add it to SPF or set up DKIM).
  3. p=quarantine – failures go to spam. Optionally start with pct=25.
  4. p=reject – spoofed mail is refused. Keep reading the reports.

Questions fréquentes

Where does the record go?

Create a TXT record named _dmarc (for example _dmarc.example.com) with the generated value.

Should I go straight to p=reject?

Not on a domain that already sends mail. Start with p=none and read the reports for a few weeks – they reveal forgotten senders (invoicing, CRM, website forms) that would otherwise be blocked.

Autres outils

Tous les outils →
Email & DNS

DKIM Record Generator

Generate a DKIM key pair in your browser and get the DNS TXT record, the private key and ready-to-use OpenDKIM settings – or turn an existing public key into a record.

Ouvrir l’outil Email & DNS

DNS Lookup

Look up A, AAAA, MX, TXT, NS, CNAME, SOA, CAA, SRV and PTR records for any domain or IP address.

Ouvrir l’outil Email & DNS

SPF, DKIM & DMARC Checker

Check a domain’s MX, SPF, DMARC and DKIM records in one go, with plain-English findings and fixes for common mistakes.

Ouvrir l’outil