DMARC Analyzer
DMARC protects your domain from unauthorized use by telling receiving mail servers how to handle messages that fail authentication.
Workflow
Run check
Inspect a live record
Results are generated on demand so you can verify the current public configuration.
What is DMARC?
DMARC (Domain-based Message Authentication, Reporting, and Conformance) is a protocol that
uses SPF and DKIM to determine the authenticity of an email message.
Why is it important?
DMARC allows you to tell email receivers what to do if an email fails authentication (e.g.,
reject it or put it in spam). It also provides reports on who is sending email on your
behalf.
- None: Monitor mode. No action is taken against failing emails.
- Quarantine: Failing emails are sent to the spam folder.
- Reject: Failing emails are blocked completely (safest).
What does a DMARC analyzer check? +
It checks the _dmarc DNS record for policy, alignment, reporting, and percentage tags so you can see how failing messages should be handled.
Should DMARC use p=none, quarantine, or reject? +
Start with p=none to collect reports, then move to quarantine or reject once legitimate senders pass SPF or DKIM alignment.
Does DMARC require SPF and DKIM? +
DMARC relies on SPF or DKIM passing with domain alignment. You do not need both to pass, but configuring both improves resilience.