Which DMARC policy should I start with?

p=none with a rua address. It changes nothing about delivery and the reports show every service sending as your domain. Once your own mail passes, move to p=quarantine, then p=reject.

Where do I publish the DMARC record?

As a TXT record at _dmarc.yourdomain.com (the host is _dmarc in most DNS panels). Subdomains without their own record inherit it.

What is the difference between relaxed and strict alignment?

Relaxed (the default) passes when the SPF or DKIM domain shares the From domain's organizational domain, so mail.example.com aligns with example.com. Strict requires an exact match.

Free tool

DMARC record generator

Build a DMARC record with the policy, subdomain policy, reporting addresses and alignment you choose, with each tag explained in plain words.

Last updated 2026-10-21

Run it with curl

This tool is also a free API: no account, no key, CORS open. OpenAPI description.

curl "https://sendly.now/api/tools/dmarc-generator?p=none&rua=dmarc%40example.com"

# Markdown instead of JSON:
curl -H "Accept: text/markdown" "https://sendly.now/api/tools/dmarc-generator?p=none&rua=dmarc%40example.com"

Before you publish

Make sure your mail passes SPF or DKIM with your own domain; DMARC checks alignment with the From address.
Publish the record as TXT at _dmarc.<your domain>, replacing any existing one.
Check it with the DMARC checker, and read the aggregate reports before tightening the policy.

Questions people ask

Which DMARC policy should I start with?: p=none with a rua address. It changes nothing about delivery and the reports show every service sending as your domain. Once your own mail passes, move to p=quarantine, then p=reject.
Where do I publish the DMARC record?: As a TXT record at _dmarc.yourdomain.com (the host is _dmarc in most DNS panels). Subdomains without their own record inherit it.
What is the difference between relaxed and strict alignment?: Relaxed (the default) passes when the SPF or DKIM domain shares the From domain's organizational domain, so mail.example.com aligns with example.com. Strict requires an exact match.

Something on this page out of date, or missing the case you are in? Write to support@sendly.now — we answer our own email. The full technical detail lives in the documentation.