A DMARC record is a TXT policy published at _dmarc.<your-domain> that tells mailbox providers what to do with mail that fails SPF and DKIM alignment - monitor it (p=none), quarantine it, or reject it. This free checker resolves your record, parses every tag, and flags the 8 most common configuration errors that leave domains spoofable.
This tool resolves the DMARC TXT record at _dmarc.<your-domain>, parses every tag, and identifies common configuration problems that leave domains vulnerable to spoofing or unable to receive aggregate reports.
Backed by original research: BounceZero’s 2026 email deliverability benchmarks quantify the reputation signals mailbox providers reward - and an enforced DMARC policy is the authentication half of that equation.
DMARC is not a "publish once and forget" record. The correct rollout takes 90 days minimum:
Our full email authentication walkthrough covers alignment rules, multi-provider setup, common mistakes, and verification commands.
Read the full guideAuthentication is half the inbox battle. Verify a real address with our free email checker - no signup needed.
p=none is monitor-only. Receiving servers send you reports but still deliver spoofed mail to your customers. After 30 days of clean reports (every legitimate sender aligned), ramp to p=quarantine, then p=reject.
Daily XML files from every mailbox provider, one per provider. Each contains a count of mail authenticated against your domain, broken down by source IP, SPF result, DKIM result, and alignment outcome. Parse these with a free tool like Postmark DMARC or pay for Valimail/dmarcian for dashboards.
Strict only if you control all subdomain sending and never want subdomain.example.com to authenticate as example.com. For most senders, relaxed alignment (the default) is correct and lower-risk.
Yes, but it does nothing useful. DMARC requires at least one of SPF or DKIM to pass with alignment. Publish both first, confirm they pass alignment, then publish DMARC.
Look up the TXT record at _dmarc.yourdomain.com using this checker - it returns the full record, parses every tag, and flags missing policy, missing rua=, duplicate records, and weak alignment. Google, PayPal, and Microsoft all publish v=DMARC1 records you can compare against.
pct= sets the percentage of unauthenticated mail that gets the p= action. At pct=50 with p=quarantine, half of failing mail is quarantined and the rest is delivered normally. Ramp pct to 100 once your aggregate reports are clean.
Single-email checks, no signup required
Decode the Received chain and trace the path
Validate DKIM records and selectors
Build a DMARC TXT record with rua reporting
Validate and debug your SPF record
Build an SPF record for Google, M365, SendGrid
Check MX records and priority
Continue through related topics