Skip to main content

DMARC Checker & Lookup

Run a free DMARC lookup to validate your domain's DMARC record and improve email authentication.

Loading checker...

What Our DMARC Checker Verifies

A DMARC lookup does more than confirm a record exists. Our checker retrieves the TXT record published at _dmarc.yourdomain.com via DNS-over-HTTPS and evaluates it against the DMARC specification and current best practices:

  • Record presence and syntax — the record starts with v=DMARC1, tags are well-formed, and no duplicate records exist (duplicates make receivers ignore DMARC entirely).
  • Policy strength — whether your policy (p=) is monitoring only or enforcing, and whether a separate subdomain policy (sp=) applies.
  • Coverage — the pct= tag, which controls what share of failing mail your policy actually applies to.
  • Reporting setup — whether aggregate (rua=) and forensic (ruf=) report addresses are configured and valid.
  • Alignment modes — relaxed vs strict alignment for SPF (aspf=) and DKIM (adkim=).

The result is a 0–100 security score with each issue ranked by severity, so you know exactly what to fix first.

Common DMARC Errors and How to Fix Them

No DMARC record found

Anyone can spoof your domain until a record is published. Create one with the DMARC record generator and publish it at _dmarc as a TXT record.

Multiple DMARC records

Publishing two records at _dmarc is a hard failure — receivers ignore DMARC completely. Delete one so exactly one record remains.

Stuck at p=none

p=none is the right starting point, but it blocks nothing. After 2–4 weeks of clean reports, move to p=quarantine, then p=reject.

No rua reporting address

Without rua= you get no visibility into who is sending as your domain. Add one, then read the reports with the DMARC report analyzer.

Reduced coverage (pct below 100)

pct=25 means three quarters of failing mail is delivered as if no policy existed. Use it only as a temporary ramp toward full enforcement.

DMARC Checker FAQs

What is a DMARC lookup?

A DMARC lookup retrieves and validates the _dmarc DNS TXT record for your domain to confirm your DMARC policy and reporting settings.

What does a DMARC checker do?

A DMARC checker analyzes your DMARC record for syntax issues and best practices, and helps you move from monitoring (p=none) to enforcement (p=quarantine or p=reject).

What is a DMARC analyzer?

A DMARC analyzer interprets your DMARC results and reports to highlight authentication alignment, policy gaps, and recommended changes over time. Try our DMARC analyzer to parse aggregate reports.

Do I need SPF and DKIM for DMARC?

Yes. DMARC relies on alignment with SPF and/or DKIM. Ensure your SPF and DKIM are correctly configured and aligned with your sending domain.

Related Tools

SPF Checker

Validate your domain's SPF record and DNS lookup usage.

DKIM Checker

Look up and validate DKIM records for any selector.

Create DMARC Record

Build a custom DMARC record with step-by-step guidance.

Bulk DMARC & SPF Lookup

Validate DMARC and SPF records for up to 50 domains at once.

DMARC Analyzer

Upload and parse DMARC XML aggregate reports.