DMARC record checker
Look up the DMARC policy published for a domain and see what receivers make of it.
What a DMARC record does
DMARC is a single TXT record at _dmarc.yourdomain.com. It does two things.
First, it tells receiving mail servers what to do with messages that claim to be from
your domain but fail both SPF and DKIM alignment: p=none means deliver them
anyway, p=quarantine means send them to spam, p=reject means
refuse them at the door. Second, through the rua= tag, it asks those
receivers to send you daily XML reports of everything they saw. No other source names every
server sending mail as your domain.
Since the 2025 bulk-sender rules at Google, Yahoo and Microsoft, a valid
DMARC record is a hard requirement for high-volume senders; missing or broken records
produce 550 5.7.515 and 550 5.7.26 rejections. The usual path
is to publish p=none with a rua= tag, watch reports until every
legitimate sender aligns, then move to quarantine and finally reject. Watch for a weak
sp= on subdomains and a pct= below 100. Both leave a gap.
The senders your DNS cannot name
A DNS lookup shows the record receivers read on the next message. The reports receivers send go further: they name each host that sent under your domain and whether its mail passed. Paid plans email you the day a report first names a new sender failing. One Monday email covers 5 domains on Pro, $19 a month.
Start watching your sendersNo card · 12+ months of history · The free plan does not expire