DMARC Checker (Free) – Validate Policy, Alignment & Reporting
Validate your DMARC record: policy enforcement (none, quarantine, reject), alignment, and rua/ruf reporting. Fix common mistakes before Gmail and Yahoo enforce.
If SPF/DMARC look correct but mail won't send, see SMTP AUTH migration.
What we check
- Policy (p=) — none, quarantine, or reject. We show what receivers will do when alignment fails. Policy explained.
- Subdomain policy (sp=) — Optional; applies to subdomains if not set.
- Alignment — Whether SPF/DKIM domains align with the From domain (strict vs relaxed).
- rua / ruf — Report URIs for aggregate and forensic reports; we validate format and that they resolve. Reporting guide.
- Syntax — Valid tags and values so the record is accepted by receivers.
Common DMARC mistakes
- Leaving p=none forever without moving to quarantine/reject when ready.
- No rua so you never see aggregate reports or prove monitoring.
- Alignment failure because SPF or DKIM is on a different domain than From.
- Invalid mailto: in rua/ruf (typos, missing schema).
- Multiple DMARC records (only one is valid per domain).
Check my DMARC policy
DMARC, SPF, and key headers in one scan. No signup required.
FAQ
What is DMARC policy enforcement?
Policy tells receivers what to do when alignment fails: none (monitor only), quarantine (e.g. spam folder), or reject. Reject is strongest; none is for testing.
What is DMARC alignment?
Alignment means the From domain (or organizational domain) matches the domain used in SPF/DKIM. Strict alignment requires exact match; relaxed allows organizational domain match. Most senders use relaxed.
What are rua and ruf?
rua is the address for aggregate reports (daily summaries). ruf is for forensic (failure) reports. Both use mailto: and should point to a mailbox or service that can receive the reports.
Why does my DMARC check fail?
Common causes: missing or misconfigured record, policy p=none with no rua (some checkers expect reporting), alignment failure because SPF/DKIM domain doesn't match From, or syntax errors.
Do you modify my DNS?
No. We only read your domain's DNS and report what we see. We don't send email or change any records.
Related reading
Read-only checks. We don't send email or modify DNS. How we check