Skip to content

Free tool · no sign-up

DMARC record checker

Short answerThe DMARC checker finds the record at _dmarc.yourdomain, validates every tag and explains in plain English what happens to mail that fails SPF and DKIM alignment, and who receives the reports.

Lookups run in your browser through public DNS-over-HTTPS resolvers (Cloudflare, then Google). We don't store what you check. Privacy

How to use it

Reading the result

  1. 1

    Enter your domain

    The checker looks up _dmarc.yourdomain, and the parent domain's record if you check a subdomain.

  2. 2

    Read the policy

    p=none monitors only, p=quarantine sends failing mail to spam, and p=reject blocks it.

  3. 3

    Check reporting

    Without rua= you get no aggregate reports, so you can't see who sends as your domain.

  4. 4

    Tighten in steps

    Start at p=none with reports, fix every legitimate sender, then move to quarantine and reject.

DMARC
DMARC is a DNS policy that tells receivers what to do with email that fails SPF and DKIM alignment for your domain (deliver, quarantine or reject) and where to send reports about it. Large mailbox providers require a DMARC record from bulk senders. More about DMARC

FAQ

DMARC checker questions

Is p=none enough?

p=none satisfies the basic requirement of large providers that bulk senders publish DMARC, but it doesn't protect your domain from spoofing. Move to quarantine or reject once reports show your legitimate senders pass.

What does rua mean in DMARC?

rua is the address that receives daily aggregate reports: which IPs sent mail as your domain and whether they passed SPF and DKIM. It's how you find senders you forgot about.

Do subdomains need their own DMARC record?

No. Subdomains inherit the parent domain's policy, or its sp= policy if set. Publish a separate record only if a subdomain needs a different policy.

Go deeper: Bulk-sender requirements. Fix it for good with deliverability monitoring.