Which DMARC policy should I start with?

Start with p=none and a report address for a week or two, to see every service sending as your domain. Then move to p=quarantine, and to p=reject once only your own senders appear.

Where do I add the DMARC record?

As a TXT record with the name _dmarc (the full name is _dmarc.yourdomain.com) at the DNS provider for your domain.

Free DMARC record generator

DMARC tells Gmail, Outlook and Yahoo what to do with email that pretends to come from your domain. It's what stops fake invoices sent in your company's name. Choose your settings, then copy the record.

1Your settings

Name / Host

Value

Reports to dmarc@syncgaze.in appear in your SyncGaze dashboard as a list of who sends mail as your domain. Prefer to read the raw reports yourself? Use your own address.

2Add it to your DNS

Add a TXT record with the name _dmarc at your DNS provider. If one already exists, edit it instead, because a domain may have only one DMARC record. Guides for GoDaddy, Hostinger, Cloudflare, Namecheap and BigRock. Then check your domain.

3A safe rollout

DMARC only passes when SPF or DKIM passes for your domain. Set those up first (SPF generator).
Week 1–2: p=none. Read the reports and add any missing senders, such as billing software or website forms.
Then p=quarantine, and later p=reject for full protection. DMARC explained.

See who sends mail as your domain

SyncGaze Mail turns DMARC reports into a plain list, and signs your mail with DKIM. Free for your first year.

Start free