Fix-it Tools

DMARC Policy Builder

Builds a valid DMARC TXT record from a policy, alignment modes, and report addresses; no hand-writing the tag=value syntax yourself.

Policy (p)

Requested policy for this exact domain: what receivers should do with mail that fails DMARC.

Aggregate report addresses (rua)

Address(es) for aggregate reports: periodic XML summaries of who's sending mail claiming to be this domain.

Advanced options

Subdomain policy (sp)

Requested policy for subdomains: overrides "p" for mail claiming to be from any subdomain of this one.

Coverage (pct)

Percentage of failing mail the policy applies to. The remainder falls back to the next-lightest policy (monitoring instead of enforcing).

DKIM alignment (adkim)

SPF alignment (aspf)

DKIM identifier alignment: relaxed (r) accepts any matching organizational domain, strict (s) requires an exact match. SPF identifier alignment: relaxed (r) accepts any matching organizational domain, strict (s) requires an exact match.

Forensic report addresses (ruf)

Address(es) for forensic reports: per-message failure detail. Most large mailbox providers no longer send these, for privacy reasons.

Failure options (fo)

Failure reporting options: which kinds of authentication failures trigger a forensic report.