Instantly analyze a domain’s DMARC record, policy, and alignment to detect
authentication issues and prevent email spoofing.
Check for a DMARC record
Check the type of policy
Check for a valid syntax
Check URL configuration
Domain: _dmarc.example.com
Record: v=DMARC1; p=reject; pct=100; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=1; aspf=r; adkim=r
Monitors authentication results without affecting delivery.
Sends unauthenticated emails to spam or junk folders.
Blocks unauthenticated emails completely.
DMARC (Domain-based Message Authentication, Reporting, and Conformance) is an email authentication protocol that helps prevent spoofing and phishing. A DMARC record works with SPF and DKIM to tell receiving servers how to handle unauthenticated emails using your domain.
A DMARC checkup retrieves your domain’s DMARC record and evaluates its policy, alignment, and reporting setup. This helps identify missing records, weak policies, and authentication issues that may affect email deliverability.
If no DMARC record is found, your domain is not enforcing DMARC authentication. Add a DMARC record to your DNS to start monitoring and protecting your domain from spoofed emails.
DMARC can fail if SPF or DKIM are not aligned with the From domain. Even valid SPF or DKIM results will fail DMARC if alignment requirements are not met.
DMARC updates depend on DNS propagation and caching. Changes usually appear within a few minutes but may take up to 24–48 hours to reflect fully.
Alignment failure means the authenticated SPF or DKIM domain does not match the domain used in the From address. This is a common cause of DMARC checkup failures.
Warnings often indicate weak configurations such as missing reporting addresses, relaxed alignment settings, or monitoring-only setups that may limit protection.
A misconfigured DMARC record can impact delivery if authentication fails. Running a DMARC checkup helps identify issues before enforcement affects legitimate emails.
DMARC reports may not be delivered if the reporting address is invalid, unauthorized, or incorrectly formatted. Ensure your rua address is reachable and allowed.
It’s recommended to perform a DMARC checkup whenever DNS changes are made and periodically to ensure continued alignment and authentication health.
