DMARC Record Checker

Validate your domain’s DMARC record: we check the policy strength, alignment settings, and reporting addresses, and flag weak or missing configuration that leaves you open to spoofing.

Try: · ·

What is DMARC?

DMARC (Domain-based Message Authentication, Reporting & Conformance) ties SPF and DKIM together and tells receivers what to do with mail that fails: nothing (p=none), quarantine it, or reject it.

It also requests reports (rua) so you can see who is sending as your domain — legitimate or not.

From monitoring to enforcement

Start at p=none to observe without affecting delivery. Once your legitimate senders pass, move to p=quarantine and then p=reject to actually block spoofed mail.

A record stuck at p=none provides reporting but no protection — this checker flags that so you keep moving toward enforcement.

Frequently asked questions

Is p=none enough?
No — p=none only monitors. To stop spoofing you need p=quarantine or p=reject. Use none temporarily while you confirm legitimate senders pass.
What changed in the new DMARC spec?
DMARCbis (RFC 9989) keeps v=DMARC1 but removes pct, rf, and ri, and adds np and t. This checker flags removed/deprecated tags.

Want better inbox placement?

JaxSuite helps you fix authentication, warm up your domains, and land in the inbox.

Get started