--- title: "DMARC Record Generator: Build Your DMARC Free | Prosyo" description: "Free DMARC generator: build a correct DMARC record with reporting, choose none, quarantine or reject, and follow a safe rollout to full protection." url: "https://prosyo.com/pt/tools/dmarc-generator/" image: "https://prosyo.com/wp-content/uploads/2026/10/cropped-Prosyo-Icon-Transparent-1.png" language: "pt" --- Free Tools # DMARC Record Generator Build a correct DMARC record in plain English, with reporting set up and a safe path from monitoring to p=reject. DMARC Record GeneratorInstant · results in seconds 100% free 1. 1Fill in 2. 2Run the check 3. 3Fix & use What you get - A plain-English verdict in seconds - Every record found, with what it means - The exact fix for anything that fails **Agent Penny***Your AI SDR* **Do this for every prospect, automatically** Penny finds your buyers, writes personal LinkedIn and email outreach, sends it from your own accounts and drafts every reply. [Start free, 7 days](https://app.prosyo.com/?utm_source=prosyo-tools&utm_medium=tool-side&utm_campaign=dmarc-generator) No card required · Cancel in two clicks **Run outbound on autopilot**Personal LinkedIn and email outreach, sent from your accounts, replies drafted for you.[Start free, 7 days](https://app.prosyo.com/?utm_source=prosyo-tools&utm_medium=article&utm_campaign=dmarc-generator)No card required ## What is a DMARC record generator? A DMARC record generator builds the DMARC policy your domain publishes in DNS. DMARC (Domain-based Message Authentication, Reporting and Conformance) tells receiving mail servers what to do when a message claiming to come from your domain fails authentication, and where to send reports about who is sending as you. It is the record that turns SPF and DKIM from “nice to have” into real protection against spoofing and phishing in your name. This free DMARC generator writes a correct record from a few plain-English choices: the policy, where reports should go, how much failing mail the policy applies to, what happens on subdomains and how strict alignment should be. It explains every tag in the result, checks whether your domain already publishes DMARC, verifies that an outside reporting address is authorised to receive your reports, and gives you a safe step-by-step path from monitoring to full enforcement. ## Key takeaways - Start with `p=none` and a reporting address. It blocks nothing and shows you every service sending as your domain. - Move to `p=quarantine`, then `p=reject`, once every legitimate sender passes. - Publish the record as a TXT record named `_dmarc`. One record per domain. - Gmail, Yahoo and Microsoft require DMARC for bulk senders; every serious sender should have it. - DMARC needs SPF or DKIM to pass using the same domain as the From address (alignment). ## How to use the DMARC generator 1. **Enter your domain**, for example `yourcompany.com`. 2. **Pick a policy.** Start with none if you have never had DMARC. 3. **Enter the address that should receive daily reports.** A dedicated mailbox such as `dmarc@yourcompany.com`, or the address a DMARC reporting service gives you. 4. **Set the percentage** of failing mail the policy applies to. Leave 100 unless you are ramping up quarantine. 5. **Choose a subdomain policy** and **alignment**. Relaxed alignment suits almost everyone. 6. **Press “Generate DMARC record”**, then publish it as a TXT record with host `_dmarc`. **Free tools fix one email. Prosyo fixes the pipeline.**Penny researches every buyer, writes personal LinkedIn and email outreach and books the meetings, from your own accounts. [Try Prosyo free](https://app.prosyo.com/?utm_source=prosyo-tools&utm_medium=article&utm_campaign=dmarc-generator) ## The parts of a DMARC record | Tag | Example | What it does | | --- | --- | --- | | `v` | `v=DMARC1` | Identifies the record. Must come first. | | `p` | `p=none` | The policy: none, quarantine or reject. | | `rua` | `rua=mailto:dmarc@yourcompany.com` | Where aggregate (daily summary) reports go. | | `sp` | `sp=reject` | Policy for subdomains, if different from the main one. | | `pct` | `pct=25` | Share of failing mail the policy applies to while you roll out. | | `adkim` / `aspf` | `adkim=s; aspf=s` | Strict alignment for DKIM and SPF. Relaxed is the default. | | `ruf` | `ruf=mailto:…` | Forensic (per-message) reports. Few providers send them; most teams skip this. | A first record usually looks like this: `v=DMARC1; p=none; rua=mailto:dmarc@yourcompany.com`. A fully enforced one looks like this: `v=DMARC1; p=reject; rua=mailto:dmarc@yourcompany.com`. ## none, quarantine or reject? | Policy | What happens to failing mail | Use it when | | --- | --- | --- | | `p=none` | Delivered as normal; you receive reports. | You are starting out and need to see who sends as you. | | `p=quarantine` | Sent to spam or junk. | Reports show your real senders pass, and you want protection with a safety net. | | `p=reject` | Refused outright. | Every legitimate sender passes. This is full protection. | `p=none` on its own does not stop spoofing; it is a monitoring step. The goal for most domains is reject. ## A safe path from none to reject 1. **Weeks 1 and 2: `p=none`.** Read the reports. List every service sending as your domain: your mailbox provider, CRM, help desk, billing, marketing platform. Make sure each passes SPF or DKIM with your domain. 2. **Fix anything that fails.** Add missing senders to SPF with the [SPF Generator](https://prosyo.com/tools/spf-generator/), and turn on DKIM signing with your domain in each service. 3. **Weeks 3 and 4: `p=quarantine; pct=25`.** A quarter of failing mail goes to spam. Watch reports and complaints. Raise to 50, then 100. 4. **Then `p=reject`.** Keep reports on, and recheck whenever you add a new sending tool. Domains that never send email can go straight to `v=DMARC1; p=reject`, together with an SPF record of `v=spf1 -all`. That stops anyone using them for phishing. ## Alignment: the part most people miss DMARC passes only when SPF or DKIM passes *and* the domain they checked matches the domain in the visible From address. That match is called alignment. - **SPF alignment:** the envelope sender (return-path) domain must match the From domain. - **DKIM alignment:** the `d=` domain in the DKIM signature must match the From domain. With **relaxed** alignment, subdomains count as a match, so `mail.yourcompany.com` aligns with `yourcompany.com`. With **strict** alignment, they must be identical. Relaxed is the default and the right choice for nearly everyone; strict breaks many legitimate third-party senders. The most common cause of DMARC failure is a sending service that signs DKIM with its own domain instead of yours. The fix is to complete the “authenticate your domain” step in that service, so it signs with your domain. You can see exactly which checks passed on a real message with the [Email Header Analyzer](https://prosyo.com/tools/email-header-analyzer/). ## Reading DMARC reports Aggregate reports arrive as zipped XML files, usually once a day from each large mailbox provider. Each one lists the IP addresses that sent mail as your domain, how many messages, and whether SPF and DKIM passed and aligned. Raw XML is hard to read, so most teams send reports to a DMARC reporting service, which turns them into dashboards. If you do, enter the address the service gives you in the generator. When reports go to a different domain from the one they cover, the receiving domain must publish an authorisation record, or providers may not send them. Reporting services set this up for you; the generator checks it so you know before you publish. ## DMARC and the big mailbox providers Since 2024, Gmail and Yahoo require senders of more than 5,000 messages a day to their users to publish a DMARC record (at least `p=none`), align it with SPF or DKIM, and authenticate with both SPF and DKIM. Microsoft announced similar requirements for high-volume senders to Outlook.com in 2025. Even below those volumes, DMARC is a strong trust signal, and a domain that can be spoofed freely is a domain whose reputation anyone can damage. ## Publishing the record 1. Open your DNS provider and add a **TXT** record. 2. Set the host or name to `_dmarc`. Some providers want the full name, `_dmarc.yourcompany.com`. 3. Paste the record as the value and save. 4. Check for an older DMARC record and remove it. Two DMARC records are treated as none. 5. Confirm with the [DMARC Checker](https://prosyo.com/tools/dmarc-checker/) after a few minutes. ## DMARC for cold email domains Secondary domains used for outbound should have DMARC like any other. A typical setup is SPF for the mailbox provider, DKIM signing turned on, and `v=DMARC1; p=none; rua=mailto:…` to start, moving to quarantine once reports are clean. Mailbox providers increasingly expect it, and it protects the domain you have spent weeks warming up. Run the [Domain Health Checker](https://prosyo.com/tools/domain-health-checker/) on each sending domain before you launch. ## Worked example Acme has SPF and DKIM for Google Workspace but no DMARC. The team generates `v=DMARC1; p=none; rua=mailto:dmarc@acme.com` and publishes it. After two weeks the reports show three senders: Google (passing), their help desk (passing DKIM with acme.com) and an invoicing tool that fails because it signs with its own domain. They complete the invoicing tool’s domain authentication, see it pass in the next reports, then move to `p=quarantine; pct=25`, raise to 100 over two weeks, and finally switch to `p=reject`. ## Glossary - **DMARC**: a DNS policy telling receivers how to handle mail that fails SPF and DKIM alignment, and where to report. - **Alignment**: the SPF or DKIM domain matching the visible From domain. - **Aggregate report (rua)**: a daily summary of mail sent as your domain. - **Quarantine**: deliver failing mail to spam. - **Reject**: refuse failing mail. ## How Prosyo helps Prosyo sends outreach from your own authenticated Google, Microsoft or SMTP mailboxes and your LinkedIn account, inside safe daily limits, so a domain protected by DMARC stays trusted. It writes personal first lines from real prospect activity and drafts every reply. [Start a 7-day free trial](https://prosyo.com/pricing/), no card required. ## Related free tools These tools are often used together with the DMARC Generator. All of them are free and run in your browser. - [DMARC Checker](https://prosyo.com/tools/dmarc-checker/): Read a published DMARC policy in plain English and grade it. - [SPF Generator](https://prosyo.com/tools/spf-generator/): Build one valid SPF record with the lookup count checked live. - [Email Header Analyzer](https://prosyo.com/tools/email-header-analyzer/): See SPF, DKIM and DMARC results on a real message. - [Domain Health Checker](https://prosyo.com/tools/domain-health-checker/): Score your whole sending setup in one click. ## Frequently asked questions ### How do I create a DMARC record? Choose a policy, enter a reporting address and generate the record above. Publish it as a TXT record with the host _dmarc on your domain. ### What DMARC policy should I start with? Start with p=none so nothing is blocked while you read reports and fix any sender that fails. Then move to quarantine and finally reject. ### Where do I put the DMARC record? In your domain’s DNS as a TXT record named _dmarc, for example _dmarc.yourcompany.com. ### Does p=none protect my domain? No. It only monitors. Spoofed mail is still delivered. It is a safe first step on the way to quarantine and reject. ### Do I need DMARC if I send cold email? Yes. Mailbox providers expect SPF, DKIM and DMARC from serious senders, and bulk senders to Gmail and Yahoo are required to publish DMARC. ### Why is my DMARC failing when SPF passes? Usually alignment: SPF passed for a different domain, such as a sending service’s return-path. DKIM signing with your own domain is the most reliable fix. ### Can I have two DMARC records? No. If a domain publishes more than one, receivers ignore DMARC for it. Keep exactly one. ### What is pct in DMARC? The share of failing mail the policy applies to. It is useful while ramping up quarantine, for example starting at 25 and raising to 100. ## Ready to Accelerate Your Growth? Launch smarter campaigns, convert more leads, and scale your business with ease — all in one place. [Get Started Now](https://prosyo.com/pt/) [Book a Demo](https://prosyo.com/pt/pricing/)