Does your domain have a DMARC record that works?
Enter a domain to look up its DMARC record. You see every tag explained in plain words, whether the policy is enforcing or only watching, and the exact record to publish next.
What does a DMARC record look like?
A DMARC record is one TXT record at the name _dmarc in front of your domain, so for halden.co it lives at _dmarc.halden.co. The value is a short list of tag=value pairs separated by semicolons. Only two are required: v=DMARC1, which has to come first, and p=, the policy. Everything else is optional and most records carry three or four tags at most, typically rua= for the report address, sp= for subdomains and pct= while rolling out.
A record that is complete but gentle reads v=DMARC1; p=none; rua=mailto:dmarc@halden.co. A finished one reads v=DMARC1; p=reject; rua=mailto:dmarc@halden.co. The distance between those two lines is the whole DMARC project for most companies.
What is the difference between p=none, p=quarantine and p=reject?
The policy tells a receiver what to do with a message that claims to be from your domain but fails both SPF and DKIM alignment. With p=none the receiver delivers it anyway and only tells you about it in the daily report. With p=quarantine it puts the message in spam. With p=reject it refuses the message during the SMTP conversation, so the recipient never sees it and the sender gets a bounce.
None is for learning who sends as your domain. Quarantine is where impersonation stops reaching inboxes. Reject is what Gmail, Microsoft and the brand-indicator programs count as enforced. Moving up one step at a time, with a few weeks of clean reports in between, is how you get there without losing a legitimate newsletter or invoicing tool along the way.
How do I read the reports DMARC sends me?
Each receiver that handles your mail sends one aggregate report a day to the rua= address, as a zipped XML attachment. It lists every IP address that sent mail claiming your domain, how many messages, and whether each passed SPF and DKIM. Mail services that specialise in DMARC will turn those into dashboards, but a single report is readable on its own. Drop one into the DMARC report analyzer and it will tell you in plain words which sources are yours and which are not.
If you have no record yet, the DMARC record generator builds one from a few choices, and the email DNS checker checks DMARC together with MX, SPF and DKIM.
Faivelo publishes DMARC for every domain you add.
Add your domain and we write SPF, DKIM and a DMARC record into your DNS through your registrar, with reports sent to a mailbox you own. Business email on your domain from one flat price.
Free 14-day trial. No card needed.
Questions people ask
Other free tools
All tools- Email DNS checkerCheck MX, SPF, DKIM, DMARC and reverse DNS for any domain and get the exact records to add or fix.
- DMARC record generatorBuild a valid DMARC record from a few choices and copy the host and value into your DNS.
- DMARC report analyzerDrop in a DMARC aggregate report and see who is sending as your domain and whether they pass.
- SMTP connection testerConnect to any SMTP server, check TLS and the login step, and see each stage with its timing.
- Email header analyzerPaste raw headers to see every hop, where the delay was, and whether SPF, DKIM and DMARC passed.
- Email address validatorCheck whether an address is well formed, whether its domain accepts mail, and whether it is disposable or a role account.
- SMTP error codesWhat each bounce code means, which provider sends it and how to fix it, one page per code.