🏷️ DMARC Tags Reference
A DMARC record is a DNS TXT record published at _dmarc.yourdomain.com. It consists of key=value tags separated by semicolons. All 11 tags from RFC 7489 are covered here, with valid values, defaults, and what each one actually controls.
Minimal vs. Full DMARC Record
Minimum (monitoring only)
v=DMARC1; p=none; rua=mailto:[email protected]
Full enforcement
v=DMARC1; p=reject; sp=reject; rua=mailto:[email protected]; adkim=s; aspf=s
Required Tags
Recommended Tags
Optional Tags
ruf=
Default: No forensic reports sent
Forensic Report URI (ruf)
e.g. ruf=mailto:[email protected]
adkim=
Default: r (relaxed)
DKIM Alignment (adkim)
e.g. adkim=r
aspf=
Default: r (relaxed)
SPF Alignment (aspf)
e.g. aspf=r
fo=
Default: 0
Failure Options (fo)
e.g. fo=1
rf=
Default: afrf
Report Format (rf)
e.g. rf=afrf
ri=
Default: 86400 (24 hours)
Report Interval (ri)
e.g. ri=86400
pct=
Default: 100
Percentage (pct)
e.g. pct=100
Quick Reference: All DMARC Tags
| Tag | Required? | Valid Values | Default |
|---|---|---|---|
| v | Yes | DMARC1 | — |
| p | Yes | none, quarantine, reject | — |
| sp | No | none, quarantine, reject | Inherits from p |
| rua | No | mailto: URI(s), comma-separated | No aggregate reports sent |
| ruf | No | mailto: URI(s), comma-separated | No forensic reports sent |
| adkim | No | r, s | r (relaxed) |
| aspf | No | r, s | r (relaxed) |
| fo | No | 0, 1, d, s | 0 |
| rf | No | afrf | afrf |
| ri | No | Positive integer (seconds) | 86400 (24 hours) |
| pct | No | 0–100 (integer) | 100 |
🛡️ Analyse or Build Your DMARC Record
Check your current DMARC record for issues, or build a new one from scratch.