Free tools / DMARC Checker
DMARC record checker
DMARC tells receiving mail servers what to do when a message claiming to be from your domain fails SPF and DKIM: deliver it anyway, quarantine it, or reject it. It also tells them where to send reports. Since 2024, Gmail and Yahoo require a DMARC record from anyone sending in volume, and a domain without one gets throttled.
This checker reads the record at _dmarc.yourdomain.com, breaks out each tag, and flags the two problems that matter most: no record at all, and a policy of p=none that has been left in monitoring mode for years while spoofed mail keeps landing.
What you get back
Policy. none, quarantine or reject, plus the subdomain policy if set.
Reporting. The rua (aggregate) and ruf (forensic) addresses, so you know whether anyone is receiving reports.
Percentage and alignment. pct, adkim and aspf, which control how much mail the policy applies to and how strictly identifiers must match.
Issues. Every problem, in plain language, with what to change.
How to use it
- Enter the domain.
- Press Check DMARC.
- If there is no record, publish one at p=none with a rua address, watch reports for a few weeks, then move to quarantine and finally reject.
Who uses this
Bulk senders meeting Gmail and Yahoo rules. A DMARC record is mandatory for anyone over roughly five thousand messages a day to Gmail.
Security teams. p=reject is the only thing that actually stops someone spoofing your domain to your own customers.
Agencies onboarding client domains. Checking DMARC on day one avoids discovering the problem after a campaign lands in spam.
Same check, in your code
One API key, one credit pool, 1,000 free lookups to start. Phone, email, IP and DNS checks from a single endpoint, and you only pay for lookups that return an answer.
Start free Read the docsQuestions
What should my first DMARC record look like?
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com. That publishes a record, satisfies the bulk sender rules, and starts reports arriving without affecting delivery.
Is p=none good enough?
It satisfies the letter of the Gmail requirement, but it does nothing against spoofing. Plan to move to quarantine within a couple of months.
Why is the record not found when I just added it?
DNS propagation. Wait for your TTL to expire and check again. Also confirm the record is at _dmarc.yourdomain.com, not at the root.
What are adkim and aspf?
Alignment modes. r (relaxed) allows subdomains to match; s (strict) requires the exact domain. Relaxed is the default and fine for most senders.