Sign up free

DMARC Checker – Test Your DMARC Record and Policy

Look up a domain's DMARC record and see what each tag means, how strong the policy is and where reports go.

About DMARC Checker

A DMARC checker helps when Gmail and Yahoo ask bulk senders for a DMARC record, when you're ready to move from monitoring to quarantine, or when spoofed mail is going out under your domain. Enter a domain and click Check. The record is read from _dmarc.yourdomain, and if a subdomain has none, from the main domain it inherits from. Every tag is listed with a plain explanation, from p, sp, np and pct to rua, ruf, adkim, aspf, fo and ri.

The checks rate the policy, since p=none only monitors, and flag sp=none that leaves subdomains open, pct below 100, a missing rua address, report addresses that aren't mailto: links, more than one record, and strict alignment. When reports go to another domain, such as a reporting service, the tool checks that it has published the record authorizing it to receive them. Build or fix a record with the DMARC Record Generator.

How to use DMARC Checker

  1. 1
    Enter the domain

    Type the domain from your From address, and a subdomain without its own record falls back to the main domain.

  2. 2
    Run the DMARC checker

    Click Check to read the record and see each tag explained.

  3. 3
    Review the policy

    See whether p is none, quarantine or reject, and read what each warning suggests.

  4. 4
    Update the record

    Change the TXT record at _dmarc in your DNS, or build a new one with the DMARC Record Generator.

Why use Cubfile for this

  • Every tag explained

    Each tag, from p and sp to rua, ruf, adkim, aspf, fo and ri, in plain words.

  • Policy rating

    A p=none policy counts as monitoring only, while quarantine and reject enforce it.

  • Report checks

    Missing rua, broken report addresses, and outside domains that haven't authorized your reports.

  • Subdomain fallback

    A subdomain without its own record shows the policy it inherits.

FAQ

DMARC Checker: questions and answers

What does p=none mean in a DMARC check?
Receivers take no action on failing mail and only send reports. It's the right way to start, but it doesn't stop spoofing, so move to quarantine and then reject once the reports show your own mail passing.
Why does the DMARC checker say an outside domain hasn't agreed to receive my reports?
When rua or ruf points to another domain, that domain must publish a TXT record at yourdomain._report._dmarc.theirdomain, or receivers may not send reports there. Reporting services usually set this up when you add your domain.
What are relaxed and strict alignment?
Relaxed (r) lets a subdomain match your From domain, for example mail.example.com with example.com. Strict (s) needs an exact match, so mail signed or sent from a subdomain fails.
Does DMARC work without SPF or DKIM?
No. DMARC passes only when SPF or DKIM passes for a domain that matches the From address, so set up at least one, ideally both, and check them with the SPF Record Checker and the DKIM Checker.
Is the DMARC checker free?
Yes, with no sign-up, and it doesn't use your daily tasks. An hourly allowance applies, higher for signed-in members, and nothing you check is stored.
Share DMARC Checker with a friendIt runs in any browser, and they can try it without signing up.

Related tools

MAIL MX Record LookupSee which mail servers receive email for a domain, in priority order.
MAIL Email Header AnalyzerPaste email headers to see the servers a message passed, delays and SPF/DKIM results.
MAIL Email Address CheckerCheck email addresses for typos, disposable domains and working mail servers.
MAIL SPF Record CheckerCheck an SPF record, expand its includes and count DNS lookups.
MAIL DKIM CheckerFind and check a domain’s DKIM keys, trying common selectors for you.
MAIL DMARC Record GeneratorCreate a DMARC record step by step, from monitoring to reject.
MAIL SPF Record GeneratorBuild a correct SPF record for your mail providers.
SEO Broken Link CheckerCheck every link on a page and list the ones that are broken or redirected.