Back to Tools
📧 Free Tool

DMARC Record Checker

Look up _dmarc, read the policy, and see whether you are only monitoring or actually enforcing.

Looks up _dmarc.yourdomain.com. Use the From domain, not a mailbox.

What this DMARC checker actually looks at

DMARC sits on top of SPF and DKIM. Those two can pass on a domain that is not the From address. DMARC asks whether the authenticated domain aligns with what the recipient sees, then applies p=. Without DMARC, SPF and DKIM are an honour system.

The record lives at _dmarc.yourdomain.com. One TXT. This checker follows a CNAME if you pointed _dmarc somewhere else, then reads p, sp, pct, rua, ruf, and alignment.

none is not protection

A valid p=none record is still a monitoring feed. Spoofed mail gets delivered. That is the right first week, and the wrong third year. Use rua reports to find every sender, fix SPF/DKIM for the legitimate ones, then quarantine, then reject.

Check SPF and DKIM on the same domain with the SPF checker and DKIM checker. The longer walkthrough is the SPF, DKIM, and DMARC guide.

DMARC Record Generator

Build one _dmarc TXT with policy, rua, and alignment.

Generate DMARC →

Domain Scanner

Score SPF, DKIM, DMARC, and MX together.

Scan a domain →

DMARC Checker FAQ

What is a DMARC record?

DMARC is a DNS TXT record at _dmarc.yourdomain.com. It tells receivers what to do when SPF and DKIM both fail to align with the From domain: nothing (p=none), send to spam (quarantine), or reject. It can also send you XML reports so you can see who is sending as you.

What do none, quarantine, and reject mean?

p=none monitors and delivers normally. p=quarantine asks receivers to junk failing mail. p=reject asks them to block it. Start at none, read rua reports for a few weeks, then quarantine, then reject. Jumping to reject with unknown senders will bounce your own mail.

Do I need rua reporting?

Yes if you want to enforce later. Without rua= you are guessing which platforms send as you. Aggregate reports are XML summaries, not copies of the emails. ruf= forensic reports are optional and many providers never send them.

What is DMARC alignment?

SPF or DKIM can pass on a different domain than the From address. DMARC only counts a pass when that domain aligns. Relaxed (r) allows a subdomain. Strict (s) requires an exact match. Relaxed is the default and what most ESPs need.

Can I have more than one DMARC record?

No. One TXT at _dmarc. Two records and receivers will not know which policy to use. Edit the existing record when you change p= or add rua=.

Does a valid DMARC record mean mail will hit the inbox?

No. It is a policy for failures, not a placement guarantee. SPF and DKIM still have to pass and align. p=none with a valid record does not stop spoofing.

Want the rest of the setup checked?

DMARC is the policy. A free audit covers authentication, list quality, and the sending habits that actually move inbox placement.

Get Your Free Audit →