Free DMARC Record Checker

What is DMARC?

DMARC (Domain-based Message Authentication, Reporting & Conformance) is the policy layer that sits on top of SPF and DKIM. It tells receiving mail servers two things:

• What to do with mail that fails SPF or DKIM alignment (do nothing, quarantine, or reject)
• Where to send reports about your mail flow

The three DMARC policies

p=none — monitor only

Receivers do nothing differently based on the result. You receive aggregate reports (via rua=) so you can audit your senders before tightening the screws. Start here.

p=quarantine — send to spam

Failing messages get marked as spam. A reasonable middle ground while you're still discovering legitimate senders that aren't aligned.

p=reject — block

Failing messages are rejected at the SMTP layer. The strongest protection — but only safe once you're confident all your legit senders pass DMARC.

What this checker validates

• Record exists at _dmarc.yourdomain.com
• Policy (p=) is one of none / quarantine / reject
• Subdomain policy (sp=) — separate rule for subdomains
• Coverage (pct=) — what percentage of mail is policy-enforced
• Aggregate reports (rua=) — where daily summary reports go
• Forensic reports (ruf=) — per-failure detail (rarely used today)

Common DMARC mistakes

Setting p=reject too early

If your marketing tool isn't fully aligned, going straight to reject will lose mail. Run p=none with rua= reporting for 4–8 weeks first.

Missing rua=

Without an aggregate report destination, you're flying blind — there's no way to discover legitimate senders that fail your policy.

Using pct<100 long-term

pct=25 means only a quarter of your mail is policy-enforced. Useful for staged rollout, but you should ramp to 100 quickly.

Related tools

• SPF Checker — validate your SPF record
• DKIM Checker — look up your DKIM public key