DMARC Record Wizard

Builds a valid DMARC record from the current DMARCbis spec (RFC 9989) — no legacy pct/ri/rf tags, since those were removed. Runs entirely in your browser; nothing you type here is sent anywhere.

Domain

Policy (p)

Aggregate report addresses (rua)

Advanced options

Failure report addresses (ruf)

Subdomain policy (sp)

Non-existent subdomain policy (np)

DKIM alignment (adkim)

SPF alignment (aspf)

Failure reporting options (fo)

Testing mode (t=y) — signals receivers this policy is provisional

How to use this

Start at p=none and add your aggregate report address — this changes nothing about mail delivery, it just starts collecting data.
Once reports show every legitimate source aligned, move to quarantine, then reject.
Publish the result as a TXT record at the host shown above.

Read more in how to publish a DMARC record, including the destination authorization record this wizard warns about above when it applies.