DMARC Record Checker
This DMARC Record Checker verifies domain-based message authentication, reporting configuration, and email policy enforcement.
About This Tool
DMARC (Domain-based Message Authentication, Reporting & Conformance) helps protect domains from email spoofing.
You can use this tool to:
- Check DMARC policy (none, quarantine, reject)
- Verify reporting addresses (rua / ruf)
- Validate enforcement level
- Improve email deliverability
Frequently Asked Questions
What is a DMARC record?
DMARC (Domain-based Message Authentication, Reporting & Conformance) is a DNS record that builds on SPF and DKIM to:
Prevent email spoofing
Define enforcement policy
Enable reporting
It tells receiving servers how to handle failed authentication.
What does p=reject mean in DMARC?
p=reject means:
Emails that fail DMARC checks should be rejected completely.
This provides the highest level of protection.
What is the difference between none, quarantine, and reject?
p=none → Monitoring onlyp=quarantine → Send suspicious emails to spamp=reject → Block failed emails entirely
What is sp= in DMARC?
The sp= tag defines the policy for subdomains.
If not set, subdomains may not be fully protected.
What are rua and ruf?
rua= → Aggregate reports (summary of authentication results)ruf= → Forensic reports (detailed failure reports)
These help domain owners monitor email abuse.
What is adkim and aspf alignment?
adkim= controls DKIM alignment strictnessaspf= controls SPF alignment strictnesss = strictr = relaxed
Strict alignment offers stronger protection.
Why is my DMARC protection score not 100?
A domain may score below 100 if:
It uses relaxed alignment
Subdomain policy is not defined
Reporting addresses are missing
Enforcement percentage is less than 100%
The score helps evaluate overall enforcement strength.
