DMARC record checker
Looks up the exact domain first, then correctly walks to the organizational domain (via the real Public Suffix List) if nothing is published directly.
1 · Input
Related Tools
More tools in the same category
Other Tools
Popular tools from across A2Z
What DMARC adds on top of SPF and DKIM
SPF and DKIM each authenticate email in their own way, but neither one, on its own, tells a receiving server what to DO with a message that fails, or requires the failure to be about the domain the recipient actually sees in their inbox. DMARC closes both gaps: it sets a policy for failures, and requires the authenticated domain to align with the visible From address.
The policy tag (p=)
- none - take no action, just report. A common (and reasonable) starting point while a domain is confirming DMARC will not misfire on its own legitimate mail.
- quarantine - treat a failure as suspicious, typically routed to spam.
- reject - refuse the message outright. The strongest setting, appropriate once a domain is confident every legitimate source of its mail is properly authenticated.
Why the rua= address matters
Without an aggregate-report address, failures are evaluated by receivers but never reported back to the domain owner - a policy running with no visibility into what it is actually catching, or breaking.
Related tools
See SPF and DKIM, the two mechanisms DMARC's alignment check builds on.
Rate this tool
Was this tool useful? Your feedback helps us improve it.