Free DMARC Checker
Check your DMARC record and policy in seconds. Read-only.
Read-only checks · No email sending · Works even if SPF passes
How it works
We look up the TXT record at _dmarc.<your domain>. We report the policy (none, quarantine, or reject), alignment settings, and reporting tags (rua, ruf). The scan is read-only and does not modify DNS.
Common DMARC issues
- No DMARC record at
_dmarc.<domain> - Policy set to
p=rejectbefore testing withp=none - Alignment failure (SPF/DKIM domain doesn’t match From)
- Invalid syntax or missing semicolons
- rua/ruf addresses that can’t receive reports
FAQ
What does a DMARC check look at?
We look up the TXT record at _dmarc.<your domain>. We report policy (p=none, quarantine, or reject), alignment settings, and reporting tags (rua, ruf). We don't change any DNS.
Why does my DMARC check fail?
Common causes: no record at _dmarc.<domain>, invalid syntax, policy set to reject before testing, or alignment failing because SPF/DKIM domain doesn't match the From domain.
Do you modify my DNS?
No. We only read your domain's DNS and report what we see. We don't send email or change any records.
What is DMARC alignment?
Alignment means the domain in the From header matches the domain used to pass SPF or DKIM. Strict requires exact match; relaxed allows the organizational domain. Most providers use relaxed.