[ Free tool · Email Authentication ]

DMARC Checker

Look up and explain any domain's live DMARC record.

[ About this tool ]

This DMARC checker looks up the TXT record at _dmarc.<domain>, validates the syntax and explains every tag so you can see whether your domain is protected against spoofing.

How to read the results

  • ›p=reject or p=quarantine means spoofed mail is blocked or sent to spam.
  • ›p=none means monitoring only; scanners report 'quarantine/reject policy not enabled'.
  • ›No rua= address means you receive no reports.
  • ›More than one record is an error: receivers then ignore DMARC.
  • ›The DMARCbis readiness panel checks the record against RFC 9989 and highlights each faulty tag in red, such as removed pct, rf or ri tags, with the exact fix.
  • ›Subdomains without their own record are checked the RFC 9989 way: the tool walks up the DNS tree to the record that governs them.

Frequently asked questions

How do I check my DMARC record?

Enter your domain above. The tool queries _dmarc.yourdomain.com through public DNS-over-HTTPS and explains the result.

What is a good DMARC policy?

p=reject with a rua reporting address is full protection. Leave out pct: RFC 9989 removed it, and the policy applies to all mail by default.

Why does my DMARC lookup return nothing?

The record is missing, published on the wrong host (it must be _dmarc), or DNS has not propagated yet.

Learn more in our guide: What Is DMARC? How It Works & the 3 Policies

Enterprise provenance

Why top financial institutions and governments retired their email security dashboards.

Traditional email authentication platforms sell you a dashboard and ask your engineers to do the labour. In high-stakes environments, manual oversight means delayed enforcement, configuration drift and unmonitored shadow domains.

EmailAuth is the agentic email provenance platform. Our agents enforce p=reject, keep third-party senders aligned and move your domains to full RFC 9989 compliance, the new DMARC standard, with human-in-the-loop auditability.

Governments Large enterprises Tier-1 financial institutions

SaaS · Dedicated tenancy · Air-gapped on-prem · BYOK encryption

[ More tools ]

DMARC Generator

Build a valid _dmarc TXT record with guided options.

DMARC Report Analyzer

Upload XML aggregate reports for an instant compliance dashboard.

Full Domain Health Scan

Run every email security check at once and get one score.

SPF Checker

Validate your SPF record and check the 10-lookup limit.

DKIM Lookup

Verify a DKIM selector is published and the key is valid.

BIMI Record Checker

Check a BIMI record and whether the logo will actually display.