Free tool

Generate your DMARC,to the 2026 standard.

Build a clean DMARC record that matches the latest standard (RFC 9989, May 2026): no more obsolete pct, the t= test mode and the np= policy for non-existent subdomains. Copy it, paste it into your DNS.

RFC 9989 (DMARCbis) compliant · no signup · copy-paste

Your domainPolicy (p)What receivers do with mail that fails DMARC.

Existing subdomains (sp)Non-existent subdomains (np)

Blocks spoofing via subdomains that do not exist. Recommended: reject.Aggregate reports (rua)Address that receives the daily reports — essential to steer rollout. Separate several with a comma.

DKIM (adkim)SPF (aspf)

Test mode (t=y)Publishes the policy without actually enforcing it (one level down) — to roll out safely. Replaces the old pct.

Publish as TXT on

_dmarc.votre-domaine.fr

Your DMARC record

v=DMARC1; p=none

Without a rua address you get no reports: you are publishing blind. Add one.

Rollout without breakage

Start at p=none with rua: you watch who sends as you, without blocking anything.
Move to quarantine with test mode: the policy applies one level down while you fix your legitimate senders.
Aim for p=reject and np=reject: spoofing blocked, including on non-existent subdomains.

The pct tag was removed by RFC 9989 (DMARCbis). This tool never emits it — the t= test mode replaces it.

Roll out DMARC without breaking your mail?

Reaching a policy that truly protects, without blocking a single legitimate email, means reading the reports and fixing senders one by one. That is our job.

Get guidance