DMARC record checker
DMARC publishes a policy telling receivers how to treat failures, and requires alignment: the domain that passed SPF or DKIM must match the From domain your recipient sees. This is why mail can pass SPF and still fail DMARC.
Under active development: The live DNS engine for DMARC checker is currently being built. Test the interactive preview below to explore what it evaluates.
Preview Diagnosis — _dmarc.example.com
Sample demonstration- PassRecord found
v=DMARC1; p=none; pct=100 - CheckPolicy
p=none — monitor onlyNothing is blocked. Correct while observing; move to quarantine once reports are clean.
- FixReporting address
missingWithout rua= you have a policy with no visibility into what it is doing. Add rua=mailto:dmarc@example.com
- PassCoverage
pct=100
Valid but effectively blind — add a reporting address before tightening the policy.
SadaSend runs these checks continuously on your sending domains, and refuses to send until they pass — so mail Gmail would reject never leaves.
Read the docsWhat this checks
- The record exists at _dmarc and parses
- The policy (p=) is present and its effect is explained
- A reporting address (rua=) is set, so the policy is observable
- The percentage (pct=) and subdomain policy are sensible
Questions
Other tools
- SPF checkerSoonCheck an SPF record, resolve every include, and count DNS lookups against the limit of ten.
- DKIM validatorSoonFetch a DKIM public key by selector, check the key length, and verify the record parses.
- MX lookupSoonResolve a domain's mail exchangers, check priorities, and flag common misconfigurations.
- Blocklist checkSoonQuery major blocklists for an IP address or sending domain.
- Inbox placement testSoonSend one message to seed addresses across major providers and see where it actually lands.