← All toolsLive DNS lookup

DMARC Record Checker

Enter any domain to instantly see its DMARC record, parsed tags, health grade, and specific recommendations.

Live lookup, no account required. Get alerted when your record changes.

See plans →

What your DMARC record controls

Your DMARC record is a single DNS TXT entry that controls what happens when someone sends email pretending to be you. It lives at _dmarc.yourdomain.com and tells receiving servers whether to deliver suspicious mail, route it to spam, or reject it entirely. This tool does a live lookup, parses every tag, and shows you exactly what your current policy says, without dig commands or guessing. New to all of this? Our guide to setting up email for a new SaaS covers DMARC from the ground up.

How to use this tool

Enter any domain and click Check. The tool queries DNS in real time and returns your DMARC record exactly as mail receivers see it. If no record is found, you'll see what that means for your deliverability and what to add. If a record is found, each tag is decoded into plain language: what your current policy enforces, whether your rua= address is valid, and what to fix.

Frequently asked questions

What is a DMARC record?
A DMARC record is a DNS TXT record published at _dmarc.yourdomain.com. It tells receiving mail servers what to do with emails that fail authentication: deliver them (p=none), send them to spam (p=quarantine), or reject them outright (p=reject). It also specifies where to send aggregate reports so you can see which senders are passing and which are failing.
How do I check my DMARC record?
Enter your domain above and click Check. The tool performs a live DNS lookup for your _dmarcrecord and parses every tag. You'll see your current policy, alignment mode settings, reporting addresses, and any configuration issues in seconds. No account required.
What should my DMARC record look like?
A minimal valid record: v=DMARC1; p=none; rua=mailto:reports@yourdomain.com. The rua=tag is where aggregate reports get sent; without it, you're flying blind. Once your reports show consistent alignment across all your senders, move from p=none to p=quarantine, then eventually p=reject.
What does p=none mean?
Monitoring mode. Mail that fails DMARC is still delivered. Nothing is blocked or filtered. It's the right starting point because it lets you collect reports and understand all your sending sources before you enforce anything. Most domains stay at p=none much longer than they should. Once your aggregate reports show consistent alignment, move to p=quarantine.

Seeing alignment failures in your reports?

DMARCdrift ingests your DMARC reports automatically, identifies which senders are failing and why, and alerts you before misconfigurations affect deliverability.

Get started free →

Monitor this domain’s DMARC record continuously. Get alerted when it drifts.

See plans →