Tools
DMARC Checker — Check DMARC DNS Record
Check a domain's DMARC DNS record, policy and common configuration issues.
Understand and repair a DMARC policy
The checker reads the TXT record at _dmarc, validates the policy tag and explains whether the domain is monitoring or enforcing. Start with visibility, identify every legitimate sender, then tighten policy gradually.
Frequently asked questions
Why is p=none a warning?
It collects reports but does not request quarantine or rejection. It is still the safest first stage.
Can I publish two DMARC records?
No. Publish one DMARC TXT record at _dmarc for the domain.
What this report checks
DMARC Checker queries _dmarc, validates the policy and turns monitoring or enforcement gaps into a staged remediation plan.
| Signal | Healthy result | Problem detected | Recommended action |
|---|---|---|---|
| Record presence | One v=DMARC1 TXT record | Missing or multiple DMARC policies | Publish exactly one TXT policy at _dmarc. |
| Policy | p=none during discovery, then quarantine or reject | Enforcement before legitimate senders align | Collect reports first and increase enforcement gradually. |
| Reporting | A monitored rua mailbox | No reports or an address nobody reviews | Use a dedicated address or reporting service you control. |
| Alignment | SPF or DKIM aligns with visible From | Authentication passes for a different domain | Configure aligned DKIM or an aligned return path for every sender. |
From result to verified repair
- 1Run the check for the organizational domain.
- 2Start with p=none and a working aggregate-report destination.
- 3Identify every sender and verify aligned SPF or DKIM.
- 4Move through quarantine to reject only after reports show the change is safe.
What this tool cannot prove
- Public DNS cannot show whether every real message aligns.
- The tool does not receive or interpret aggregate XML reports.
- DMARC protects identity but cannot guarantee inbox placement.
Overview
Check a domain's DMARC DNS record, policy and common configuration issues.
Authentication is the foundation
TXT proves control. MX directs incoming mail. SPF, DKIM and DMARC give receivers evidence that your messages are legitimate.
Related guides
Frequently asked questions
Yes. You only add the records shown for your domain.