DMARC Checker & Validator

Validate your DMARC records instantly to spot syntax errors, check enforcement policies, and verify reporting URIs.

How to troubleshoot email spoofing with a DMARC Checker

A misconfigured DMARC (Domain-based Message Authentication, Reporting, and Conformance) record can cause your legitimate emails to be rejected, or leave your domain vulnerable to impersonation. Enter your domain above to instantly parse and validate your DMARC string. This tool checks for missing tags, malformed URIs, and policy enforcement levels.

Interpreting your DMARC validation results

  • Record Not Found: Remember that DMARC is not published on your main domain. It must be published as a TXT record at _dmarc.yourdomain.com. If you put it on your root domain, this check will fail.
  • Policy Level (p=): If your policy is set to p=none, DMARC is in monitoring mode. It will not stop spoofed emails. To actively block spam and spoofing, you must gradually move to p=quarantine or p=reject.
  • Malformed Reporting Tags (rua/ruf): If you want to receive XML reports about who is sending email on your behalf, your rua tag must use the correct format. A common mistake is forgetting the prefix. It must be rua=mailto:reports@example.com.