DMARC Record Checker
Instantly look up any domain's DMARC policy. See enforcement level, alignment settings, reporting addresses, and configuration recommendations — all in one place.
DMARC (Domain-based Message Authentication, Reporting & Conformance) is a DNS record that tells email servers how to handle messages that fail SPF or DKIM authentication. Use this free DMARC Record Checker to instantly look up any domain's DMARC policy, review alignment settings, and spot configuration issues that could leave your domain vulnerable to email spoofing. No login, no installation — just enter a domain and get your results.
How to Check a DMARC Record
- Enter the domain name you want to check in the input field (e.g.,
example.com). - Click "Check DMARC Record" — the tool queries DNS for the
_dmarc.example.comTXT record in real time. - Review the results — see the full raw record, policy setting (none / quarantine / reject), subdomain policy, and reporting email addresses.
- Check alignment settings — the tool flags whether DKIM and SPF alignment are in relaxed or strict mode.
- Fix any issues — use the recommendations panel to identify missing or misconfigured tags before they impact deliverability.
Why Use Flipper File to Check DMARC Records?
- Instant DNS lookup — Results come back in seconds with no delay or registration wall.
- Full record breakdown — Every DMARC tag (v, p, sp, pct, rua, ruf, adkim, aspf) is parsed and explained in plain English.
- Policy strength indicator — Visual badge shows whether the domain is enforcing DMARC (reject), soft-failing (quarantine), or monitoring only (none).
- Reporting address display — See exactly where aggregate (rua) and forensic (ruf) reports are being sent.
- No software to install — Runs entirely in your browser; nothing is stored on our servers.
- Free and unlimited — Check as many domains as you need without creating an account.
Frequently Asked Questions
What is a DMARC record?
A DMARC record is a DNS TXT record published at _dmarc.yourdomain.com. It instructs receiving mail servers what to do when an email fails SPF or DKIM authentication — options are none (monitor only), quarantine (send to spam), or reject (block the message). DMARC also enables reporting, so you get visibility into who is sending email on behalf of your domain.
Why is DMARC important?
Without DMARC, attackers can send emails that appear to come from your domain — a technique called email spoofing or phishing. A properly configured DMARC policy prevents this by telling receiving servers to reject or quarantine unauthenticated messages. As of 2024, Google and Yahoo require DMARC for bulk senders, making it essential for any business email program.
What does the p tag mean?
The p tag sets the DMARC policy for the domain: none means the record is monitoring only and no action is taken on failing emails; quarantine sends failing messages to spam; reject blocks them entirely. A p=none policy is often used during initial setup while you review reports, and should be upgraded to quarantine or reject once you're confident in your authentication setup.
What is the pct tag?
The pct tag specifies what percentage of messages the DMARC policy applies to (1–100). For example, pct=50 means only 50% of failing emails receive the full policy action. This is useful during a gradual rollout, but most production domains should use pct=100 (or omit the tag, which defaults to 100).
What are rua and ruf addresses?
rua is the aggregate reporting address — receiving servers send daily XML reports summarizing authentication results for your domain. ruf is the forensic reporting address for individual failure reports. Providing rua is strongly recommended so you can monitor who is sending email on your behalf and catch authentication problems early.
What does "no DMARC record found" mean?
If this tool returns no DMARC record, it means the domain has no DMARC policy published in DNS. This leaves the domain unprotected against spoofing and means you won't receive any authentication reports. You should create a DMARC TXT record at _dmarc.yourdomain.com — start with v=DMARC1; p=none; rua=mailto:reports@yourdomain.com to begin collecting data.
How do adkim and aspf affect my DMARC policy?
adkim controls DKIM identifier alignment: r (relaxed, the default) allows the DKIM signing domain to be a subdomain of the From address domain; s (strict) requires an exact match. aspf does the same for SPF. Relaxed alignment is appropriate for most configurations, especially if you use email service providers that send on your behalf.
How does DMARC relate to SPF and DKIM?
DMARC builds on top of SPF and DKIM. SPF verifies that the sending mail server is authorized to send for your domain; DKIM adds a cryptographic signature to the message headers. DMARC ties them together by checking that the authenticated domain in SPF or DKIM aligns with the From domain that recipients actually see, and then applies your policy if neither test passes.