Home / Email Tools / DMARC Check
Email Tools
Policy, alignment and reporting address review.
DMARC Check retrieves the DMARC policy record for a domain and explains the policy, the alignment mode, the percentage applied, and where aggregate and failure reports are sent.
Enter a domain name (example.org) and run the tool. The probe fetches the DMARC TXT record from _dmarc.example.org and parses every tag.
Input: Domain — e.g. example.org.
The output shows the raw DMARC record, the policy (p=none monitors only, p=quarantine sends to spam, p=reject blocks failing mail), the percentage applied (pct), the alignment mode (relaxed/strict), and the reporting addresses (rua/ruf). p=none is a safe starting point; p=reject with alignment is the strongest protection against domain spoofing.
→ Verify a DMARC record is published and correctly formatted.
→ Check the policy strength before moving from monitor to enforce.
→ Confirm rua reporting addresses are set so you receive aggregate data.
→ Audit alignment mode (relaxed vs strict) for a sending domain.
Start with p=none and rua reporting to collect aggregate data without affecting delivery. Once you are confident all legitimate senders pass SPF/DKIM alignment, move to p=quarantine, then p=reject for the strongest spoofing protection.
Alignment requires the domain in the From header to match the domain authenticated by SPF or DKIM. Strict alignment requires an exact match; relaxed alignment allows a parent/subdomain match. Without alignment, passing SPF or DKIM alone does not satisfy DMARC.
rua (reporting URI for aggregate) receives daily XML summaries of mail passing and failing DMARC — essential for monitoring. ruf (forensic) receives per-message failure samples, though many providers no longer send ruf for privacy reasons.