Free tool

DMARC Record Checker

Check a domain’s DMARC record: its policy, reporting addresses and the settings that leave it open to spoofing.

DMARC tells receivers what to do with mail that fails SPF and DKIM alignment: deliver it (p=none), send it to spam (p=quarantine) or refuse it (p=reject). It also asks them to send you reports about who sends mail as your domain.

Since 2024 Gmail and Yahoo require a DMARC record from anyone sending bulk mail.

What this checker looks for

A valid v=DMARC1 record at _dmarc.your domain, or inherited from the parent domain
The policy, subdomain policy (sp=) and pct=
Aggregate (rua=) and forensic (ruf=) report addresses
Multiple records and invalid tags

Is p=none enough?

p=none only monitors. It’s the right first step while you read reports, but spoofed mail is still delivered. Move to quarantine and then reject once legitimate senders pass.

What does rua do?

rua= is where receivers send daily aggregate reports listing every server that sent mail as your domain and whether it passed SPF and DKIM.

Do subdomains need their own DMARC record?

No. Without one, a subdomain uses the parent domain’s record, with the sp= policy if set.

Clean a whole list

Upload a CSV and get every address checked: syntax, domain, mailbox, catch-all and disposable.

Start with 100 free credits

Finds the email column in any CSV, keeps your other columns
Deliverable, risky, undeliverable or unknown, with the reason for each
Download everything, or only the addresses that are safe to send to
An API for sign-up forms and CRMs
Lists are deleted after 30 days