DMARC Checker
Check the live DMARC record of a domain and see what its policy, reporting and alignment settings mean. This live check sends only the domain name you enter to Google Public DNS (or Cloudflare DNS as a fallback) over HTTPS; nothing is sent to ToolkitPoint.
How to use DMARC Checker
- Type your domain or an email address.
- Press "Check DMARC".
- Read the policy (none, quarantine or reject), the reporting addresses and the alignment settings.
- Follow the advice for any warning, such as adding a report address.
Worked example
Check google.com. The tool reads the record at _dmarc.google.com, explains its p= and sp= policies, lists where aggregate reports go, and shows whether DKIM and SPF alignment are relaxed or strict.
When to use this tool
- Meeting Gmail and Yahoo sender requirements.
- Checking a domain's spoofing protection before sending invoices or newsletters.
Important limitations
Reads the published record only; it cannot see whether reports arrive or how receivers apply the policy.
Frequently asked questions
What DMARC policy should I use?
Start with p=none and a rua report address to see who sends mail as your domain. When the reports show only your own services passing, move to p=quarantine and then p=reject.
Do Gmail and Yahoo require DMARC?
Since 2024 they require bulk senders (about 5,000 or more messages a day to their users) to publish a DMARC record, at least p=none, alongside SPF and DKIM.
What are rua and ruf?
rua is where receivers send daily aggregate reports, which is the useful part. ruf asks for per-message failure reports, which few providers send.
What does pct mean?
pct applies the policy to only that percentage of failing mail. It is useful while ramping up, but should end at 100.
Is this a live lookup?
Yes. It reads the TXT record at _dmarc.yourdomain from public DNS through Google or Cloudflare when you press the button.