Free tool · 100% in-browser
DMARC record checker
Paste a DMARC record or look up a domain to see every tag explained in plain language — policy, alignment, reporting and coverage — plus a checklist of issues like p=none (monitoring only), a missing rua, or a pct below 100. Parsed entirely in your browser.
DMARC checker FAQ
What does a DMARC checker do?+
It reads a DMARC record (the TXT value at _dmarc.yourdomain) and explains every tag in plain language — your policy, alignment, reporting addresses and coverage — then flags issues like p=none (monitoring only), a missing rua, or pct below 100. This tool does it entirely in your browser.
How do I find my DMARC record?+
It's a TXT record at _dmarc.yourdomain.com. Enter your domain above and click Look up to fetch it via DNS-over-HTTPS, or paste the record directly. If you don't have one, generate it with our SPF/DKIM/DMARC generator.
Is p=none bad?+
Not bad to start with — it's the right first step for monitoring. But p=none provides no protection: it tells receivers to take no action on unaligned mail. Once your aggregate reports show SPF and DKIM aligning for all legitimate mail, move to p=quarantine and then p=reject.
What's the difference between relaxed and strict alignment?+
Alignment (adkim/aspf) controls how closely the authenticated domain must match the From domain. Relaxed (r) allows subdomains to match the organizational domain; strict (s) requires an exact match. Relaxed is the common, practical default for most senders.
Related: authentication in PowerMTA · email header analyzer