Email authentication

DMARC Record Checker

Check and validate your DMARC record against the spec. Get a 0-100 score, policy strength, reporting and alignment analysis — free, using live DNS.

Check a DMARC record

Enter a domain to fetch and validate its DMARC record at _dmarc.

What this DMARC record checker does

Fetches your live DMARC record over DNS-over-HTTPS
Validates the v=DMARC1 syntax and tags
Scores the policy strength from 0 to 100
Flags p=none, missing reporting and partial pct
Shows subdomain policy and alignment settings
Explains prioritised fixes with AI

Common use cases

  1. 1Confirming DMARC is published and valid
  2. 2Checking whether you are enforcing or just monitoring
  3. 3Auditing DMARC before a BIMI application
  4. 4Verifying a record after DNS changes
  5. 5Reviewing a domain you are taking over
  6. 6Diagnosing why spoofed mail still gets through

Related tools

DMARC generatorDMARC policy advisorDMARC aggregate report parserSPF Record CheckerDKIM Record CheckerEmail Authentication Analyzer

About DMARC records

A DMARC record at _dmarc.yourdomain.com tells receivers how to handle mail that fails SPF and DKIM alignment, and where to send reports. The strongest posture is p=reject with aggregate reporting; p=none only monitors and offers no protection.

This checker scores your record against what mailbox providers enforce and names each issue. Fix any fails, keep a rua address, and advance toward p=reject once reports confirm all legitimate mail aligns.

More Free Tools Where This Came From

This utility is one of dozens of free, no-login tools for DNS, email, SEO and developers — all instant and private.

See All ToolsTalk to Our Team

HostCloud.in  ·  Pune, India  ·  Serving 34,987+ Websites Since 2020

FREQUENTLY ASKED QUESTIONS

Got Questions? We Have Answers.

What does the DMARC record checker test?

It fetches your DMARC record at _dmarc, validates the v=DMARC1 syntax and tags, and scores the policy strength, reporting and alignment from 0 to 100.

Why is p=none scored low?

p=none only monitors — it does not stop spoofing. It scores lower than quarantine or reject because your domain is still exploitable.

Do I need a rua tag?

Yes. Without a rua reporting address you get no visibility into who sends as your domain, so the checker flags its absence.

What is a good DMARC score?

Aim for 100 — p=reject with aggregate reporting. Quarantine at full coverage scores well; p=none or a missing record scores low.

Does this read my live DNS record?

Yes. Your DMARC record is resolved over DNS-over-HTTPS at the moment you run the check — no cached data.

What is the difference from the DMARC Policy Advisor?

The checker validates and scores your current record; the advisor recommends the next safe step and a ready-to-publish record for your rollout.