DMARC Record Checker
Analyze DMARC policies and reporting configurations for your domain
What is a DMARC Record?
Domain-based Message Authentication, Reporting, and Conformance (DMARC) is an email authentication protocol that builds upon SPF and DKIM to protect your domain from email spoofing and phishing attacks. DMARC allows you to specify how receiving mail servers should handle emails that fail authentication checks.
Why DMARC Records Matter
DMARC protects your domain by preventing unauthorized use of your brand in phishing or spoofing attacks. It also provides visibility into email authentication failures through reporting, helping you identify and fix issues. Many email providers give preferential treatment to domains with properly configured DMARC.
Check Your DMARC Record
DMARC Policy Explanation
Policy Options (p=)
- none: No action is taken on messages that fail DMARC authentication. Used for monitoring only.
- quarantine: Messages that fail should be treated with suspicion, typically by sending them to the spam/junk folder.
- reject: Messages that fail should be rejected outright (not delivered).
Reporting Options
- rua: Aggregate report URI - Where to send aggregate reports about DMARC failures.
- ruf: Forensic report URI - Where to send detailed reports about specific messages that failed DMARC.
A Recommended DMARC Implementation Strategy
- Start with monitoring: Begin with
p=noneto collect data without affecting delivery. - Review reports: Analyze the aggregate reports to identify legitimate email sources.
- Fix issues: Ensure all legitimate email sources implement SPF and DKIM correctly.
- Gradual enforcement: Move to
p=quarantinewith a low percentage (e.g.,pct=10), then gradually increase. - Full enforcement: Once confident, move to
p=rejectwithpct=100.
Example DMARC Records
Basic monitoring record:
v=DMARC1; p=none; rua=mailto:dmarc-reports@example.comQuarantine policy with forensic reports:
v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc-reports@example.com; ruf=mailto:forensic@example.comStrict reject policy:
v=DMARC1; p=reject; rua=mailto:dmarc-reports@example.comNeed Help?
Setting up DMARC correctly involves a careful approach. If you need assistance, consider:
- Contacting your domain registrar or DNS provider
- Consulting with your email service provider
- Create a free Buffsend account for more deliverability tools and support
