Best free DMARC record generators
AdminKit's DMARC record generator builds a _dmarc TXT record entirely in your browser with no account and no upload, but it ranks second of four: EasyDMARC's own page documents a broader tag list (including the ri reporting interval), while dmarcian's wizard showed a maintenance notice when read and MxToolbox's page does not list its tags at all.
AdminKit is built by Netbase JSC. AdminKit is listed below; the other tools are independent.
Criteria and how we weighted them
This roundup ranks four free DMARC record generators against four published criteria, in priority order:
- Tag coverage documented on the tool’s own page — does the page itself show which of the RFC 7489 tags
(
p,sp,rua,ruf,pct,adkim,aspf,fo, andri) the generator lets you set? A tool whose page does not say ranks behind one that does. - Usable today — a generator whose own page displayed an outage or maintenance notice when read on 2026-11-08 ranks behind one that did not.
- Privacy of what you type — does the page confirm the record is built locally, rather than leaving it unstated or submitting your domain to a server?
- No account — can you build a record without signing up?
Ranking from those criteria, not from preference, is why AdminKit sits second of four rather than first. On
criterion 1, EasyDMARC’s own page lists one more tag (ri) than AdminKit’s
DMARC record generator does, so it ranks first. AdminKit wins criteria 2 and 3 over the
rest: its page documents all eight core tags, it worked when read, and it is the only page that states the record
is built in your browser and nothing is sent anywhere. Both gaps are page-level: where a competitor’s page was
silent we mark it “not stated” rather than claim the tool lacks the feature.
What is a DMARC record generator, and what doesn’t it do?
A DMARC record generator assembles the text of the _dmarc.<your domain> TXT record defined in
RFC 7489 from a few choices: a policy, optional report
addresses and alignment modes. It is different from a checker: none of the generators here publish the record,
and none confirm it is live. To check what your domain currently publishes, use AdminKit’s
DMARC check or see the best free SPF and DMARC checkers
roundup; once reports start arriving, the best free DMARC report analyzers
roundup covers reading them.
The ranked list, explained
1. EasyDMARC (DMARC Record Generator) — per its own page,
read 2026-11-08, the tool is introduced as “Generate DMARC Records in a few clicks and use it in your DNS.” The
page lists p (none, quarantine, reject), rua, ruf, sp, pct, adkim, aspf, fo and ri, and tells
you to copy the record and paste it into your domain’s DNS zone yourself. No trial or paid wording is attached
to the generator itself. The page does not say whether the form runs locally or on EasyDMARC’s servers, nor
whether an account is needed. It ranks first because it documents the broadest tag list.
2. AdminKit — AdminKit’s DMARC record generator builds the record string for your
policy, subdomain policy, rua/ruf addresses, pct and the adkim/aspf/fo settings, in your browser with
plain JavaScript and nothing sent to any server. It leaves pct out of the record at 100, because RFC 7489
defines 100 as the default, and it validates policy keywords, address syntax and numeric ranges. It does not
list ri, does not publish anything, and cannot tell you whether the report addresses you enter exist.
3. dmarcian (DMARC Record Wizard) — per its own page, read
2026-11-08, the wizard guides you through p, sp, rua, ruf, pct, adkim, aspf and fo, generates the
record syntax for you to publish yourself, and says you can continue “if you want to receive reports directly, or
you can create a free dmarcian account” — so an account is optional. On the day we read it, though, the page
displayed “Our tools are under maintenance. Please try again later.” That tag coverage equals AdminKit’s on paper,
but a generator you cannot use today ranks behind one you can; this may well be temporary. The page does not say
whether the wizard runs locally or on dmarcian’s servers.
4. MxToolbox (DMARC Record Generator) — per its own page, read 2026-11-08, “This tool will help you create a DMARC record specifically for the domain or subdomain you submit.” You enter a “Domain or Host Name” first; the tool checks that no DMARC record is already published, then offers quick or advanced question flows ending in “Finalize”, plus a “Manual Edit” option. The page we read does not list the tags it exposes, does not state whether a free account is needed, and does not say whether it is priced. It ranks last only because its own page documents the least; its workflow of checking your domain first is a genuine convenience AdminKit’s does not offer.
Best for your specific need
- Every documented tag, including the reporting interval: EasyDMARC.
- Building a record without anything leaving your browser: AdminKit — its own page confirms it.
- A guided wizard that leads into a report-processing platform: dmarcian, once its tools are back up.
- A generator that first checks whether your domain already has a DMARC record: MxToolbox.
Where AdminKit is honestly behind
AdminKit’s generator does not offer the ri reporting interval that EasyDMARC lists, and it does not look up
your domain first the way MxToolbox’s page says its tool does. It is a text builder: it never queries DNS, never
publishes the record, and cannot know whether your report addresses are real, so you must publish the record and
verify it separately with the live DMARC check. It also has no guided quick/advanced
question flow and no follow-on monitoring product of its own. AdminKit’s generator sits in AdminKit’s
email-authentication cluster alongside the DMARC, SPF and DKIM check tools.
Trademarks belong to their respective owners; AdminKit is not affiliated with EasyDMARC, dmarcian or MxToolbox. PowerDMARC was excluded because its own page could not be read (HTTP 403).
| Feature | AdminKit | EasyDMARC | dmarcian | MxToolbox |
|---|---|---|---|---|
| Own page documents the full DMARC tag set (p, sp, rua, ruf, pct, adkim, aspf, fo) | ✓ | ✓ | ✓ | — |
| Supports the ri (reporting interval) tag | ✗ | ✓ | — | — |
| Usable right now (page read 2026-11-08 offered a working generator) | ✓ | ✓ | ✗ | ✓ |
| Record is built entirely in your browser (own page says nothing is sent anywhere) | ✓ | — | — | Submits a domain first and checks whether a record is already published |
| No account or sign-up needed to build a record | ✓ | — | ✓ | — |
| Publishes the record to your DNS for you | ✗ | ✗ | ✗ | — |
AdminKit vs EasyDMARC
Own page documents the full DMARC tag set (p, sp, rua, ruf, pct, adkim, aspf, fo)
Supports the ri (reporting interval) tag
Usable right now (page read 2026-11-08 offered a working generator)
Record is built entirely in your browser (own page says nothing is sent anywhere)
No account or sign-up needed to build a record
Publishes the record to your DNS for you
AdminKit vs dmarcian
Own page documents the full DMARC tag set (p, sp, rua, ruf, pct, adkim, aspf, fo)
Supports the ri (reporting interval) tag
Usable right now (page read 2026-11-08 offered a working generator)
Record is built entirely in your browser (own page says nothing is sent anywhere)
No account or sign-up needed to build a record
Publishes the record to your DNS for you
AdminKit vs MxToolbox
Own page documents the full DMARC tag set (p, sp, rua, ruf, pct, adkim, aspf, fo)
Supports the ri (reporting interval) tag
Usable right now (page read 2026-11-08 offered a working generator)
Record is built entirely in your browser (own page says nothing is sent anywhere)
No account or sign-up needed to build a record
Publishes the record to your DNS for you
Frequently asked questions
Is AdminKit ranked first because AdminKit wrote this page?
No — AdminKit ranks second of four. The criteria below are published before the ranking. EasyDMARC ranks ahead because its own generator page lists more tags than AdminKit's does, including ri (the reporting interval), which AdminKit's tool page does not list. AdminKit ranks ahead of dmarcian and MxToolbox because dmarcian's wizard page showed an "under maintenance" notice when read on 2026-11-08, and MxToolbox's own page does not document which tags its generator exposes, whereas AdminKit's page documents them and confirms the record is built in your browser.
Why isn't PowerDMARC in this comparison?
We tried to read PowerDMARC's own DMARC record generator page (powerdmarc.com/dmarc-record-generator/) on 2026-11-08 and the server returned HTTP 403 Forbidden to our read-only request, so we could not verify anything about it from its own page. Rather than describe it from memory, we excluded it. This is a limit of our check, not a judgement on the tool; if a later read succeeds it can be added.
Does this page use any competitor's logo or brand assets?
No. Every tool name on this page is used only to identify and compare a publicly available product (nominative use). AdminKit is not affiliated with or endorsed by EasyDMARC, dmarcian or MxToolbox.
Does a DMARC generator publish the record for me or check that it works?
None of the pages compared here describe publishing the record for you. EasyDMARC's page says to copy the record and paste it into your domain's DNS zone, dmarcian's wizard page says the same record must be published by you, and AdminKit's generator only builds the text — you add it as a TXT record at _dmarc.<your domain> yourself, then confirm it with AdminKit's live DMARC check, which queries DNS.
Does the generator itself send my settings to a server?
AdminKit's tool page states the record string is built with plain JavaScript in your browser and nothing you type is sent to AdminKit or anywhere else. EasyDMARC's and dmarcian's pages read on 2026-11-08 do not say whether the form runs locally or on their servers, so this page marks that point as not stated rather than guessing. MxToolbox's page takes a domain or host name first and says it will check whether a DMARC record is already published, which implies a server-side step, but its page does not describe the processing model beyond that.
Want AdminKit to watch this for you?
Free checks tell you the state today. Protective DNS and monitoring tell you when it changes.