DMARC lookup
Read and assess a domain's DMARC record: policy, reports, and how strictly checks are enforced.
About this tool
DMARC tells receiving servers what to do with email that claims to come from your domain but fails SPF or DKIM. The record is a TXT entry placed at _dmarc before the domain name.
The tool explains each tag and what it does. The most important is p, the policy: none only monitors, quarantine sends to the spam folder, and reject blocks the message entirely. rua specifies where the daily aggregate reports are sent.
Start with p=none and an rua address, and review the reports for a few weeks. Once all legitimate email is passing, switch to quarantine and then reject.
Frequently asked questions
Is p=none enough?
It satisfies the requirement for a DMARC record, but offers no protection. Spoofed email using your domain will still be delivered normally. Think of it as a first step only.
What is the difference between rua and ruf?
rua receives aggregate reports once a day. ruf receives reports on individual messages that failed checks, though few receiving servers actually send these.
What do adkim and aspf mean?
They specify how closely the domain in the From header must match the domain in the DKIM signature and SPF check respectively. r (relaxed, the default) accepts subdomains; s (strict) requires an exact match.