Domain protection · Free developer tool
DMARC checker & generator
Understand your published DMARC policy or generate a monitoring record for your domain.
Look up a DMARC record
Live DNSStart with a monitoring policy
Record generatorGenerate a p=none record to request reports while you identify legitimate senders. Review those reports before moving to quarantine or reject.
Make sense of the result
A policy for mail that fails authentication.
DMARC ties the visible From domain to authenticated SPF or DKIM identifiers. A message can pass DMARC when either SPF or DKIM passes and aligns with that From domain. An SPF pass by itself does not establish alignment.
Read your published policy
The checker queries _dmarc.yourdomain. If a subdomain has no policy, it checks the organisational domain using the public suffix list. Results show the queried name, the record, common tag problems and whether the policy requests monitoring, quarantine or rejection.
Start with reports
The generator produces p=none, a monitoring policy. Add a report mailbox or reporting service you control, publish the TXT record, and review legitimate senders before enforcing quarantine or rejection. A report destination on another domain can require external reporting authorization.
Know what was checked
This tool checks public record configuration. It does not authenticate a message, verify report-destination authorization or confirm inbox placement. See the domain setup guide and the DMARC specification for background.
The next step
From DNS records to your first send.
Send transactional emails, build templates and receive replies on your own domain. 1,000 emails a month free.