Enter any domain to audit its email authentication DNS records. Discover whether emails from this
domain can be spoofed — and what to fix.
How to use this tool
1Enter the domain you want to check.
2Click Look Up.
3The tool fetches the _dmarc TXT record and parses each tag.
4Review the policy (none, quarantine, or reject) and adjust it to protect your domain from spoofing.
Frequently asked questions
What is DMARC?
DMARC (Domain-based Message Authentication, Reporting, and Conformance) is an email policy that tells receiving servers what to do with messages that fail SPF or DKIM checks.
What is the difference between none, quarantine, and reject?
None monitors without taking action. Quarantine sends failures to the spam folder. Reject blocks the message entirely. Start with none, gather reports, then move to reject once your legitimate email passes.
What is a DMARC aggregate report?
Aggregate reports (rua) are XML files sent by receiving servers to your specified email address. They show which IP addresses are sending email claiming to be from your domain and whether they pass authentication.
Do I need both SPF and DKIM to use DMARC?
DMARC requires at least one of SPF or DKIM to align with the From domain. Having both is strongly recommended for better coverage.