How to use DMARC Record Checker
The DMARC Check tool retrieves and decodes a domain’s DMARC record, showing its policy, alignment mode and reporting addresses so you can confirm your domain is protected against spoofing. DMARC builds on SPF and DKIM by telling receiving servers what to do when a message fails authentication and where to send aggregate reports. A correct DMARC record is essential for stopping criminals from sending phishing email that appears to come from your domain, and many large mailbox providers now expect one before granting full inbox placement.
- Enter the domain whose DMARC policy you want to inspect.
- Click Check to fetch the _dmarc TXT record from DNS.
- Read the policy (none, quarantine or reject) and percentage.
- Confirm the rua reporting address is set to collect feedback.
- Tighten the policy gradually as your reports confirm legitimate senders pass.
DMARC policies explained
The p= tag sets the policy applied to mail that fails authentication. p=none only monitors and collects reports without affecting delivery, which is the safe starting point. p=quarantine sends failing mail to spam, and p=reject blocks it entirely. The recommended rollout is to start at none, study the aggregate reports to confirm every legitimate sender passes SPF or DKIM with alignment, then move to quarantine and finally reject. Jumping straight to reject before validating your senders risks blocking your own legitimate mail.
| Policy | Action on failure | When to use |
|---|---|---|
| p=none | Monitor only | Initial rollout |
| p=quarantine | Send to spam | After validating senders |
| p=reject | Block delivery | Full enforcement |
Alignment and reporting
DMARC passes only when SPF or DKIM not only succeeds but is also aligned — meaning the authenticated domain matches the visible From domain. Alignment can be strict or relaxed, set with the aspf and adkim tags. The rua tag names an address that receives daily aggregate XML reports summarising who is sending on your behalf and whether they pass; these reports are the key to safely tightening your policy. Without a rua address you are enforcing blind, so always set one even during the monitoring phase.
Glossary
- DMARC
- A policy record that tells receivers how to handle mail failing SPF/DKIM and where to report.
- Alignment
- The requirement that the authenticated domain match the visible From domain.
- rua
- The DMARC tag specifying where aggregate reports are sent.
- Quarantine
- A DMARC policy that diverts failing mail to the spam folder.
- Spoofing
- Forging the From address to make email appear to come from a trusted domain.
Related reading
Frequently Asked Questions
Why use DMARC Record Checker?
- Decode a domain's DMARC policy and alignment settings in human-readable form
- Confirm the aggregate reporting address is configured to collect delivery feedback
- Verify the policy level before tightening from quarantine to reject
- Identify whether a domain actively rejects spoofed mail or is only monitoring
Common use cases
- Check if your domain has advanced beyond the monitoring-only p=none policy
- Confirm aggregate reports will arrive by verifying the rua address is set
- Investigate a competitor's anti-phishing posture by reading their DMARC policy
- Debug failing DMARC alignment by reading the adkim and aspf tag values
- Verify DMARC is in place before submitting to Google's bulk-sender requirements
Get weekly tool tips & updates
New tools, power-user tips, and productivity hacks — delivered free every Friday.
No spam, ever. Unsubscribe with one click.
Related Network & DNS
SPF Record Checker
Check the SPF (Sender Policy Framework) record for any domain. Validate your email authentication setup and spot misconfigurations instantly.
MX Record Lookup
Look up MX (Mail Exchanger) records for any domain. Find which mail servers handle email delivery and check their priority order instantly.
DMARC Record Generator
Generate DMARC DNS TXT records for your domain. Set policy, alignment, and reporting email addresses. Free DMARC policy generator.
DKIM Record Lookup
Look up DKIM (DomainKeys Identified Mail) DNS records for any domain and selector. Verify your DKIM email authentication setup.
TXT Record Lookup
Look up TXT records for any domain. View SPF, DMARC, DKIM, and domain-verification TXT records instantly to debug email and ownership setup.
DNS Lookup Tool
Look up DNS records for any domain — A, AAAA, MX, NS, TXT, CNAME, SOA, and CAA records. Free, instant results pulled from authoritative nameservers.
Explore all Network & DNS.