DMARC Checker

Fetch a domain DMARC record and see exactly what it tells receiving mail servers to do. The checker reads the _dmarc TXT record, parses every tag, and shows a table that explains the policy, alignment, percentage and reporting addresses in plain words. It flags a missing record or a p=none policy that is not yet enforcing. Live and private in your browser.

Enter a domain to fetch its _dmarc record and see what each tag means.

How it works

  1. 1

    Enter the domain

    Type the domain you want to inspect, such as example.com. The checker looks up the _dmarc subdomain for you.

  2. 2

    Run the check

    Press Check DMARC or hit Enter to query the _dmarc TXT record over secure DNS.

  3. 3

    Read the tag table

    See the policy, subdomain policy, alignment, percentage and report addresses, each with a one-line explanation.

Instant & 100% private — nothing is uploaded

Everything runs locally in your browser. Your code, text and files are processed on your own device and are never sent to a server — so there are no upload waits, no size limits from us, and nothing is ever stored or logged.

Frequently asked questions

What does p=none mean in a DMARC record?
p=none is monitoring mode: the domain asks receivers to send reports about mail that fails SPF and DKIM, but not to quarantine or reject anything. It is the right first step, but it offers no protection on its own. The goal is to read the reports, fix legitimate senders, then move to p=quarantine and eventually p=reject.
What are the rua and ruf tags?
rua is the address that receives aggregate reports, the daily XML summaries of how much mail passed and failed for your domain. ruf is the address for forensic reports, which are per-message samples of failures. Aggregate reports (rua) are the workhorse; many providers no longer send forensic reports, so ruf is often left out.
What is DMARC alignment?
Alignment is the rule that the domain in the visible From header must match the domain that SPF or DKIM authenticated. adkim and aspf set whether that match is relaxed (the organizational domain is enough) or strict (an exact match). Relaxed is the common, forgiving choice; strict is tighter but breaks some subdomain setups.
Is the lookup private?
Yes. The query runs in your browser against a public DNS resolver over a secure connection, reads only the _dmarc TXT record, and keeps no log of the domain you entered.

More tools

JSON Formatter & ValidatorBeautify, minify, validate JSON with a collapsible tree view.Code Formatter & MinifierPretty-print or minify JS, TS, CSS, HTML, JSON, SQL and more.YAML ⇄ JSON ⇄ TOML ConverterConvert config between YAML, JSON and TOML, both ways.JSON Schema Viewer & ValidatorRender a JSON Schema as a tree and validate data against it.Markdown Editor (Live Preview)Write Markdown with a live, side-by-side HTML preview.Mermaid Live EditorTurn Mermaid text into flowcharts and diagrams, live.

More from the Hivly network

Free sister tools on our other sites.

Color Palette GeneratorShuffle palettes with the spacebar, lock favourites, copy hex codes.Length ConverterMetres, feet, miles, inches, km and more, instantly.Word CounterCount words, characters, sentences and reading time live.