DMARC, SPF & CAA Record Generator

Point-and-click builders for SPF, DMARC, MTA-STS, TLS-RPT and CAA records, ready to paste into your DNS host.

DMARC record builder

Policy for mail that fails

Roll out in steps: none (2–4 weeks of reports) → quarantine → reject.

Aggregate reports to (rua)comma separated

Forensic reports to (ruf)rarely sent

Subdomains (sp)

Apply to (pct)100%

DKIM alignment

SPF alignment

Host_dmarc.example.comTypeTXTValuev=DMARC1; p=none

Tip: add a rua address — without reports you can't see who is sending as you.

Loading Tool...

Help shape DMARC, SPF & CAA Record Generator

The bug you just noticed will fade in 3 minutes. The feature idea will vanish after your next tab switch. Crazy peps don't suffer silently.

0/1000

Frequently Asked Questions

In your DNS host's dashboard (Cloudflare, Route 53, GoDaddy…). Create a TXT record with the host and value shown, or a CAA record for CAA.

No. Two v=spf1 records make SPF fail for every message. Merge all senders into one record — the builder does that for you.

Start with p=none and a rua address to collect reports. Once all your legitimate senders pass, move to quarantine, then reject.

It's optional but blocks TLS downgrade attacks on mail sent to you. Start in testing mode with TLS-RPT reports before enforcing.