---
title: "DMARC policy generator"
canonical: "https://bird.com/tools/dmarc-policy"
---

# DMARC policy generator

Compose a DMARC policy a la carte and watch the DNS record build itself, or paste a record you already have and read it back as plain-English choices. They stay in sync both ways.

## What is DMARC?

DMARC (Domain-based Message Authentication, Reporting & Conformance) is a small DNS record that tells the world’s mailboxes what to do with email that claims to come from your domain but can’t prove it. In plain terms: it’s how you stop scammers from sending convincing “you@yourcompany.com” phishing emails to your customers.

Email has no built-in way to verify who really sent a message: anyone can type your address into the “From” line. Two older standards, SPF and DKIM, let a receiving mail server check whether a message genuinely came from a server you authorized. DMARC ties them together: it lets you tell receivers what to do when those checks fail, and asks them to email you reports so you can see who is sending mail as your domain.

### SPF

A public list of the mail servers allowed to send for your domain. The receiver checks the sending server against that list.

### DKIM

A tamper-proof digital signature added to every message, so the receiver can confirm it wasn’t forged or altered along the way.

### DMARC

Sits on top of both. It decides what happens when a message fails SPF and DKIM, and collects reports, exactly what you configure below.

You publish the record this tool builds as a TXT record at _dmarc.yourdomain.com in your DNS provider. After saving it, changes can take a little while to spread across the internet (“DNS propagation”), so reporting won’t start immediately.

## Build your policy

Toggle the options on the left to fit your situation. Read the note under each one if you’re unsure. The DNS record on the right updates as you go. Already have a record? Paste it into the record box and the options will fill in to match.

## Policy wizard

Pick the options you want. The record updates live.



## Related resources

- [DKIM, SPF & DMARC](/docs/guides/email/dkim-spf-dmarc) (docs)
- [SPF vs DKIM vs DMARC: what's the difference?](/explained/deliverability/spf-vs-dkim-vs-dmarc) (answer)
- [Sending domains](/email-api/features/domains) (product)

[Get an implementation brief](/learn/workspace?topic=email-authentication)