Free tool
DMARC Record Checker
Read any domain's DMARC policy, see whether it is enforced, and confirm your reports actually arrive. Free and instant.
What the dmarc checker does
A DMARC checker reads the TXT record at _dmarc.yourdomain and tells you what receivers will do with mail that fails SPF and DKIM alignment. This one grades the policy (none, quarantine or reject), the subdomain policy, pct and alignment modes, falls back to the parent domain the way receivers do, and checks that external report addresses have authorised your reports.
How it works
How the DMARC Checker works
-
Enter a domain
Use the domain in your From header. Subdomains work too.
-
Policy discovery
We read _dmarc for the domain and fall back to its parent, the way receivers do.
-
Graded settings
Policy, pct, sp, alignment and reporting are checked, with external report authorisation verified.
Reading your result
What the result means
-
Enforced
p=quarantine or p=reject at 100% with reporting on. Spoofed mail is stopped.
-
Monitoring or partial
p=none, pct below 100, no rua, or reports going to an unauthorised domain.
-
Missing or invalid
No record, two records or an invalid p= tag. Gmail and Yahoo bulk sender rules are not met.
FAQ
DMARC checker FAQ
What DMARC policy do Gmail and Yahoo require?
Senders of 5,000 or more messages a day to Gmail or Yahoo users must publish a DMARC record. p=none meets the requirement, and the From domain must align with SPF or DKIM. Moving to quarantine or reject protects your domain from spoofing.
How do I move from p=none to p=reject?
Collect aggregate reports with rua for a few weeks, fix every legitimate sender that fails, then switch to p=quarantine, optionally with pct below 100 at first. When reports stay clean, raise pct to 100 and move to p=reject.
Why are my DMARC reports going nowhere?
When rua points to a mailbox on another domain, that domain must publish a TXT record at yourdomain._report._dmarc.theirdomain containing v=DMARC1. Without it, receivers drop the reports. This checker tests that for you.
Does a subdomain need its own DMARC record?
No. Without a record at _dmarc.sub.example.com, receivers apply the organisational domain's policy, using sp= when it is set and p= otherwise. Publish a separate record only when a subdomain needs a different policy.
Is DMARC enough to stop bounces?
No. DMARC controls what happens to mail that fails authentication. Bounces come from addresses that do not exist. Verify your list to remove them before every send.
Keep going
More free email tools
-
Free Email Verifier
Check syntax, domain, MX records and disposable status for any address.
Open tool -
Email Syntax Checker
Validate an address against the RFC 5321 rules our engine uses and catch typos.
Open tool -
Catch-All Checker
See whether a domain accepts mail for every address, and what that means for your list.
Open tool -
Role Email Checker
Flag info@, sales@, support@ and 250+ other shared inbox patterns in bulk.
Open tool -
Disposable Email Checker
See whether an email or domain belongs to a temporary inbox provider.
Open tool -
SPF Checker
Look up and validate an SPF record, count DNS lookups and expand every include.
Open tool -
DKIM Checker
Find a DKIM public key by selector and check its key type and length.
Open tool -
Bulk email verification
Verify every mailbox on a list of up to 100,000 addresses in one job.
Clean a list
Protect your domain and your list
DMARC stops spoofing. RocketVerifier stops bounces, with a live mailbox check on every address.
100 free credits · No card required · Credits never expire