DMARC Record Checker

Enter a domain to check and analyze its DMARC record for email authentication and security.

What is DMARC?

DMARC (Domain-based Message Authentication, Reporting, and Conformance) is an email authentication protocol that allows domain owners to protect their domain from unauthorized use, commonly known as email spoofing. It builds upon two existing mechanisms, SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail).

By implementing DMARC, you can publish a policy that tells email receivers what to do if an email purports to be from your domain but fails SPF or DKIM checks. It also provides reporting capabilities, giving you visibility into who is sending email on your behalf.

Why is DMARC Important?

Security & Protection

DMARC protects your brand by preventing attackers from sending fraudulent emails using your domain. This stops phishing attacks and Business Email Compromise (BEC).

Email Deliverability

Major email providers (like Gmail and Yahoo) now require DMARC for bulk senders. A valid DMARC record improves your sender reputation and ensures your legitimate emails land in the inbox, not the spam folder.

How to Use This DMARC Checker

  1. Enter Domain: Type the domain name you want to inspect (e.g., google.com) in the input field above.
  2. Click Check: Hit the "Check DMARC" button to initiate the lookup.
  3. Analyze Results: Our tool will retrieve the DMARC record from DNS and verify its syntax. You'll see the raw record, policy status, and breakdown of all tags.
This Tool is Totally Free to use for unlimited checks!

Understanding DMARC Policies

None

Monitoring Mode: Use p=none to collect data without affecting mail delivery. Good for starting out.

Quarantine

Enforcement Mode: Use p=quarantine to send failing emails to the recipient's spam folder.

Reject

Strict Mode: Use p=reject to block failing emails entirely. This offers the highest security.

FAQFrequently Asked Questions

Q:What is a DMARC Checker and why do I need it?

A DMARC Checker is a diagnostic tool that looks up the DMARC (Domain-based Message Authentication, Reporting, and Conformance) record for a specific domain. You need it to ensure your email domain is protected against spoofing and phishing. By verifying your DMARC record, you can confirm that you are correctly enforcing policies (like converting unauthorized emails to spam or rejecting them) and receiving reports on email activity.

Q:How does DMARC relate to SPF and DKIM?

DMARC acts as the policy layer that ties SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) together. While SPF verifies who sent the email and DKIM verifies that the email hasn't been altered, DMARC uses the results of these checks to determine if an email is authentic. If an email fails SPF or DKIM, DMARC tells the receiving server what to do (e.g., Reject the message).

Q:What is the difference between p=none, p=quarantine, and p=reject?

These are the three DMARC policies:
  • p=none: Monitoring only. No action is taken against failing emails. Best for gathering data (reports).
  • p=quarantine: Emails that fail authentication are sent to the recipient's spam/junk folder.
  • p=reject: The strictest policy. Emails that fail authentication are blocked completely and not delivered.

Q:How do I fix a "No DMARC Record Found" error?

To fix this error, you must publish a TXT record in your DNS settings.
  • Log in to your DNS provider (e.g., GoDaddy, Cloudflare).
  • Create a new TXT record with the host/name _dmarc.
  • Set the value to something like v=DMARC1; p=none; rua=mailto:[email protected].
Once added, use this tool to verify the record.

Q:What are RUA and RUF reports?

RUA (Aggregate Reports): Daily reports sent to the email specified in the rua tag. They provide an overview of all IP addresses sending email on your behalf and whether they passed/failed SPF and DKIM.
RUF (Forensic Reports): Real-time reports sent to the ruf tag address when specific emails fail authentication. They contain detailed information for debugging but can be privacy-intrusive.

Q:What indicates a DMARC Syntax Error or PermError?

A Syntax Error or PermError means receiving servers cannot interpret your DMARC record. Common causes include:
  • Missing the mandatory v=DMARC1 tag at the beginning.
  • Using invalid separators (tags must be separated by semicolons ;).
  • Having multiple DMARC records on the same domain.
  • Invalid email addresses in report tags (`mailto:` prefix missing).

Q:How do I handle subdomains with DMARC (sp tag)?

By default, the policy (p) on your main domain applies to all subdomains. However, you can use the sp (Subdomain Policy) tag to set a different policy for subdomains. For example, you might set p=reject for your main domain but sp=none for subdomains while you audit their email usage.

Related DNS & Network Tools

Explore more powerful tools in this category.

MX Record Checker

Check Mail Exchange (MX) records for any domain name instantly.

SPF Record Checker

Verify Sender Policy Framework (SPF) records to prevent email spoofing.

DKIM Record Lookup

Retrieve and verify DomainKeys Identified Mail (DKIM) records.

BIMI Record Checker

Check Brand Indicators for Message Identification (BIMI) records.

MTA-STS Record Checker

Verify MTA Strict Transport Security configurations.

TLS-RPT Record Checker

Check TLS Reporting (TLS-RPT) DNS records.

Email Blacklist Checker

Check if your mail server IP is listed on major DNSBL blacklists.

Online Port Checker

Check if a specific port is open on a target server or IP.

Advance DNS Leak Test

Verify if your VPN is leaking DNS queries and protect your online privacy.

Resolve IP to Hostname

Perform a reverse DNS lookup to find the hostname of an IP.

Website to IP Lookup

Convert domain names to IP addresses with detailed DNS and geolocation information.

Advanced Traceroute Online

Record the whole path through which network request routes to the provided Domain or IP Address.

Advanced - IPsec VPN Phase 1 & 2 Parameter Matcher

Troubleshoot VPN site-to-site configuration mismatches by comparing Local and Remote Phase 1 and Phase 2 parameters.

Advanced DNSSEC Checker

Verify DNSSEC records (DNSKEY, DS, RRSIG) and check the Chain of Trust status instantly.

Advanced DANE Record Checker

Check and validate TLSA records for DANE (DNS-Based Authentication of Named Entities).

Advanced VoIP MOS Score Calculator

Calculate Mean Opinion Score (MOS) for VoIP based on Latency, Jitter, and Packet Loss.

Advanced Fresnel Zone Calculator

Calculate 1st Fresnel Zone radius and recommended clearance for wireless links.

Advanced EIRP Calculator

Calculate Effective Isotropic Radiated Power (EIRP) for wireless links.

Advanced Fiber Loss Budget Calculator

Calculate total optical fiber loss budget, including splices and connectors, for reliable network planning.

Advanced Antenna Downtilt and Coverage Calculator

Calculate optimal antenna downtilt angle and coverage radius for precise network planning.

Advanced MTU Calculator

Calculate MTU, MSS, and protocol overheads (IPv4, IPv6, VLAN, PPPoE, etc.) for network optimization.