About this tool
A free DMARC checker that fetches the _dmarc.<domain> TXT record, parses every tag (p, sp, pct, aspf, adkim, rua, ruf) and clearly flags weak setups — most importantly p=none, which only monitors and never blocks spoofed mail.
Frequently asked questions
- Why is p=none a problem?
- p=none tells receivers to take no action on failing mail — it's fine as a temporary monitoring stage but leaves your domain exposed to spoofing indefinitely. Move to quarantine or reject once your legitimate senders authenticate cleanly.
- What does rua= do?
- rua= is where daily aggregate reports (XML summaries of authentication results) are sent. It's essential for knowing whether you can safely tighten the policy.
- What's the difference between strict and relaxed alignment?
- Relaxed alignment allows the SPF/DKIM signing domain to be an organisational match (a subdomain). Strict alignment requires an exact match.
- Do I need DMARC to send email?
- You can send without it, but major receivers (Google, Yahoo, Microsoft) increasingly require DMARC for bulk senders and reward properly authenticated domains with better deliverability.