EStore Tools

DMARC Record Generator

Build a DMARC TXT record with presets for Shopify Email, Klaviyo and Google Workspace.

Describe the result you need. AI will set up the tool and ask for any missing details.

Configure with AI

Enter to submit · Shift + Enter for a new line

Sent to AI. Leave out passwords and private customer data.

Your details

Start at none, watch your reports for a few weeks, then move up once every real sender passes.

% of mail

One or more mailto: addresses, comma separated. This is how you'll see what's passing and failing.

Most receivers ignore ruf today. Leave blank unless you specifically want failure samples.

Relaxed allows mail.yourstore.com to align with yourstore.com. Strict requires an exact match, which breaks most email tools.

DMARC TXT record

dmarc-record.txt
Name: _dmarc.yourstore.com   Type: TXT
v=DMARC1; p=none; rua=mailto:dmarc-reports@yourstore.com; fo=1

This DMARC record doesn't need to name Shopify, Klaviyo or Google Workspace specifically: DMARC checks that SPF or DKIM passed and lines up with your From domain, whichever service actually sent the mail. Shopify's own domain-connection CNAMEs handle SPF/DKIM for store emails; Klaviyo and Google Workspace need their own SPF include and DKIM CNAMEs set up separately.

How DMARC works

DMARC is one TXT record at _dmarc.yourdomain.com. It tells receivers what to do with mail claiming to be from your domain that fails SPF and DKIM, and where to send reports.

v=DMARC1; p=policy; rua=mailto:you@yourdomain.com; pct=100
policy is none, quarantine or reject.

It doesn't need to name Shopify, Klaviyo or Google Workspace: DMARC just checks that whichever service actually sent the mail passed SPF or DKIM and lines up with your From domain. Each sending service needs its own SPF include and/or DKIM records set up separately; DMARC sits on top of all of them.

Rolling it out safely

  1. 01

    Start at p=none

    Monitor only. Nothing gets blocked or sent to spam, but you get reports at the rua address showing what's passing.

  2. 02

    Read a few weeks of reports

    Confirm Shopify, Klaviyo, Google Workspace and anything else that sends as your domain all show up passing.

  3. 03

    Move to quarantine, then reject

    Once everything passes, tighten the policy. Skipping straight to reject before checking reports can send your own mail to spam.

Questions people ask

What's the difference between none, quarantine and reject?

None just monitors and delivers mail normally. Quarantine sends failing mail to spam. Reject blocks it outright. Start at none.

Do I need an rua address?

You need one to get any reports at all. Use a real mailbox you check, or a free DMARC report service that parses them for you.

Does Shopify need a specific DMARC record?

No. Shopify's domain-connection CNAME records handle SPF/DKIM for Shopify's own emails. A generic DMARC record like this one works for Shopify along with every other service sending from your domain.

What does pct do?

It applies the policy to only that percentage of failing mail, useful for a gradual rollout. Leave it at 100 once you're confident.

Related tools

Klaviyo Sending Domain CheckerCheck whether your Klaviyo branded sending domain's DKIM is live, plus SPF and DMARC, in one DNS lookup.Shopify DNS Setup GeneratorPick your DNS host and get the exact records to add and delete to connect your domain to Shopify, without breaking email.Shopify Domain Connection CheckerEnter your domain to see which DNS record is stopping it connecting to Shopify, and get the exact records to fix it.Shopify Email Authentication CheckerCheck the DMARC, SPF and CNAME records Shopify needs before it sends from your own address instead of shopifyemail.com.

Want this builtinto your store?

I'm Emmanuel, a Shopify and WooCommerce developer. If this tool pointed at something you'd rather have fixed for you (a faster store, cleaner product data, a migration, a custom feature), send me a note.

Emmanuel Asika

Emmanuel Asika

Shopify & WooCommerce developer, Dublin

I build and fix online stores: new builds, migrations, speed, SEO and the custom bits apps can't do.

hello@emmanuelasika.com
See my work

Last reviewed 30 September 2026.

Sources: Google: Email sender guidelines · RFC 9989: DMARC · Klaviyo Help: Troubleshooting branded sending domains