DMARC Checker - Free Online IT Tool

📋 DMARC Checker

Lookup a domain's Domain-based Message Authentication, Reporting, and Conformance (DMARC) record.

ℹ️ About DMARC Checker

The DMARC Checker is an essential security tool for verifying a domain's email policy. DMARC (Domain-based Message Authentication, Reporting, and Conformance) is a protocol that ties SPF and DKIM together. It allows a domain owner to publish a policy in their DNS specifying how receiving servers should handle emails that fail authentication.

With DMARC, you can instruct servers to "do nothing" (p=none), "quarantine" (p=quarantine), or "reject" (p=reject) unauthenticated mail. It also provides a mechanism for receiving servers to send aggregate reports back to the domain owner, providing visibility into who is sending mail on their behalf. This tool retrieves the _dmarc TXT record, helping you ensure that your anti-spoofing policies are correctly configured and active.

📖 How to use DMARC Checker

1. Enter the domain name you wish to audit.
2. Click 'Run Tool' to fetch the DMARC record.
3. Analyze the policy (<code>p=</code>) and the reporting email (<code>rua=</code>).
4. Verify that the policy matches your desired level of enforcement.

❓ Frequently Asked Questions

What is the 'p=none' policy used for?

The 'none' policy is used during the monitoring phase. It allows you to receive reports about authentication failures without affecting the delivery of legitimate emails while you fine-tune your SPF and DKIM.

Why is DMARC important?

DMARC is the only way to protect the 'From' header that users see in their mail clients. Without DMARC, attackers can still spoof your name even if you have SPF and DKIM enabled.

What does 'rua' mean in the record?

The <code>rua</code> tag specifies the email address where receiving servers should send aggregate XML reports regarding your email authentication traffic.