Free tools · Email domain setup
Free DMARC Record Generator and Setup Guide
Build a DMARC record from choices you can review. The generator produces text; your domain administrator publishes it. Start by understanding your legitimate sending services and their authentication.
Real public DNS lookup. No signup, mailbox connection or API key needed.
DMARC record generator
Create a TXT record from the settings you choose. This builder runs in your browser and produces text for you to review. It does not update DNS.
Your TXT record
Add the settings you intend to publish, then generate the text. Compare it with your existing record before making changes with your DNS provider.
Check your published DMARC record
Enter your own public domain. The illustrated examples below are not preloaded and no lookup runs until you submit.
Look up your public DMARC record.
Enter your domain to see the published record and any issues found. Results appear here after a real DNS lookup.
What to do next
1. Check existing DNS first
Use the checker to look up the exact visible From domain. Review any policy already published at _dmarc rather than adding a duplicate record.
2. Choose a reviewed policy
The builder starts with none for monitoring. Quarantine and reject request stronger handling for messages that fail DMARC; confirm legitimate senders are ready before choosing either.
3. Choose your reporting destination
Use a mailbox or reporting service you control and expect to receive aggregate reports. A destination on another domain can need a separate DNS authorisation at that destination.
4. Publish through the DNS host
Review the generated name and value, then have an administrator publish them. Domain hosts differ in whether they expect _dmarc or the full hostname. Run a fresh check after the update is visible.
Illustrative monitoring record
Name: _dmarc.example.com Type: TXT Value: v=DMARC1; p=none; rua=mailto:dmarc@example.com
example.com and the mailbox are fictional. Replace them with your own domain and approved reporting destination. A published monitoring policy does not request rejection and does not guarantee report delivery.
Alignment is part of the result
DMARC needs an SPF or DKIM pass aligned with the visible From domain. A provider-domain authentication pass can still be unaligned with your business domain.
Record text is not a rollout
The generator does not inspect every sending system, collect reports or turn on enforcement. Use reports and representative received messages to plan the next change.
Questions
Will AskQuokka publish the record?
No. The tool has no access to your DNS account. Copying produces text for your administrator to review and publish.
Does p=none switch off spam filtering?
No. It requests no DMARC enforcement action. A receiver can still apply its own spam, abuse and authentication policies.
Checking sends your public domain to AskQuokka. Record generation and copying run in this tab. No DNS settings are changed and no email is sent. Domain inputs and lookup results are not included in tool analytics.
Official references
References checked 23 October 2026. Use your provider's current domain-specific values.
More setup and troubleshooting guides
DMARC Policy of Reject: Meaning and Rollout
Understand what p=reject requests, check your published DMARC policy and review alignment before moving from monitoring to enforcement.
How to Read DMARC Aggregate Reports
Understand DMARC report source IPs, counts, alignment and disposition using a fictional example. Check the policy that requests your reports.