🛡️ DMARC Tags Reference

A DMARC record is a DNS TXT record published at _dmarc.yourdomain.com. It consists of key=value tags separated by semicolons. All DMARC record tags as defined in RFC 9989 (DMARCbis) and its predecessor RFC 7489 are covered here, with valid values, defaults, and what each one actually controls. RFC 7489 has been replaced by RFC 9989, 9990, and 9991 as IETF Proposed Standards. For an overview of what changed in the revision, see DMARCbis (DMARC 2.0).

Minimal vs. Full DMARC Record

Minimum (monitoring only)

                v=DMARC1; p=none; rua=mailto:[email protected]
            

Full enforcement

                v=DMARC1; p=reject; sp=reject; rua=mailto:[email protected]; adkim=s; aspf=s
            

Required Tags

v= Default: -

Version (v)

e.g. v=DMARC1

p= Default: -

Policy (p)

e.g. p=reject

Recommended Tags

sp= Default: Inherits from p

Subdomain Policy (sp)

e.g. sp=none

rua= Default: No aggregate reports sent

Aggregate Report URI (rua)

e.g. rua=mailto:[email protected]

Optional Tags

ruf= Default: No forensic reports sent

Forensic Report URI (ruf)

e.g. ruf=mailto:[email protected]

adkim= Default: r (relaxed)

DKIM Alignment (adkim)

e.g. adkim=r

aspf= Default: r (relaxed)

SPF Alignment (aspf)

e.g. aspf=r

fo= Default: 0

Failure Options (fo)

e.g. fo=1

rf= Default: afrf

Report Format (rf)

e.g. rf=afrf

ri= Default: 86400 (24 hours)

Report Interval (ri)

e.g. ri=86400

pct= Default: 100

Percentage (pct)

e.g. pct=100

t= Default: n

Testing Mode (t)

e.g. t=y

np= Default: Inherits from sp= or p=

Non-existent Subdomain Policy (np)

e.g. np=reject

psd= Default: n

Public Suffix Domain (psd)

e.g. psd=n

Quick Reference: All DMARC Tags

Tag	Required?	Valid Values	Default
v	Yes	DMARC1	-
p	Yes	none, quarantine, reject	-
sp	No	none, quarantine, reject	Inherits from p
rua	No	mailto: URI(s), comma-separated	No aggregate reports sent
ruf	No	mailto: URI(s), comma-separated	No forensic reports sent
adkim	No	r, s	r (relaxed)
aspf	No	r, s	r (relaxed)
fo	No	0, 1, d, s	0
rf	No	afrf	afrf
ri	No	Positive integer (seconds)	86400 (24 hours)
pct	No	0-100 (integer)	100
t	No	y, n	n
np	No	none, quarantine, reject	Inherits from sp= or p=
psd	No	y, n	n

🛡️ Analyse or Build Your DMARC Record

Check your current DMARC record for issues, or build a new one from scratch.

DMARC Analyser → DMARC Builder → DMARC Report Viewer →