App: Import, Modify, or Build Your DMARC TXT Record from Scratch

Most teams publish a policy once and then stop looking at it. A phone number in the directory changes, a new sending service goes live, and the record at the DNS host still describes last year’s setup.

A DMARC record is the DNS TXT value at _dmarc. It names the policy for mail that fails alignment, and the mailboxes that should receive reports. The generator on this page loads the currently published record, or accepts a pasted value, and rebuilds the line as you change it. Copy the result into DNS yourself. The page does not edit your domain.

Change the Policy Before You Publish It

Start from the record the lookup returns. If the policy is p=none, receivers are being asked to deliver the mail and send reports. Quarantine asks them to treat a failure as spam. Reject asks them to refuse it. Move from none to a stricter policy only after the reports show that your own mail is aligned.

Alignment is the part people skip. A message passes when SPF or DKIM passes, and that passing domain matches the visible From domain. Relaxed alignment, the default, allows a shared organizational domain. Strict alignment requires an exact match. The percentage tag applies the policy to a sample of failing mail, letting you test quarantine or reject before it affects every failure.

Aggregate reports, called RUA, are the daily XML files. Failure reports, RUF, are the per-message notes, and many receivers send few of them. A logo in the inbox depends on BIMI, which can’t display when the authentication under it is missing.

The Other DMARC Guides

The generator is the record itself. These pages cover the reports, the neighboring records, and the setup checks around it.

• What is DMARC? An overview of DMARC and why it’s necessary for email authentication.
• DMARC RUA Report Viewer reads an aggregate report and checks whether receivers followed the policy in that file.
• Import, Modify, or Build Your SPF Record from Scratch is the matching builder for the SPF record alignment that depends on.
• What is Email Authentication? SPF, DKIM, and DMARC Explained puts the three checks in one place.

Look up the record, change only the tags you mean to change, and publish one TXT value at _dmarc. Then read the next report before you tighten the policy again.