Does the DMARC checker change my DNS?

No. It performs a live DNS lookup and reports what is currently published.

What does the DMARC record found check mean?

It checks whether DNS returns a DMARC TXT record at _dmarc.yourdomain.com. A sending domain should publish one record that starts with v=DMARC1 so receivers know what policy to apply to messages that fail authentication.

Why does the checker look for a single DMARC record?

DMARC allows one policy record per domain. If multiple DMARC TXT records are published at _dmarc, receivers can discard them, which leaves the domain without an effective DMARC policy.

What makes a DMARC record valid?

A valid record starts with v=DMARC1, includes a valid p= policy tag, uses supported tag names and values, and separates tags with semicolons. If the syntax is wrong, receivers may ignore the record.

What is a good DMARC policy?

Use quarantine or reject once legitimate senders pass SPF or DKIM alignment. Start with none if you still need to observe traffic safely.

What does the subdomain policy check mean?

The sp= tag controls DMARC handling for subdomains. If sp= is missing, subdomains inherit the main p= policy. If sp=none is published, spoofed subdomain mail can remain in monitoring only.

Why does DMARC report monitoring matter?

The rua= tag tells receivers where to send aggregate DMARC reports. Without rua reporting, you cannot see which services send mail for the domain, which sources fail, or whether it is safe to enforce a stricter policy.

Why does external reporting authorization matter?

When DMARC reports are sent to an address on another domain, that destination domain must authorize it with a DNS TXT record. Without authorization, receivers may drop reports for that external address.

Does this checker test a specific email message?

The standalone DMARC checker validates DNS records. To see whether a real message passed DMARC, SPF, DKIM, alignment, and related delivery checks, use the email tester.

DMARC checker

Look up your DMARC DNS records and analyze for errors.

Check your DMARC record is valid and correct

Live DNS lookup

Run a live DMARC DNS lookup to verify the record receivers use, catch syntax issues, and confirm the policy protects your domain. For ongoing visibility, use Suped's DMARC monitoring to track reports, senders, and authentication failures over time. When you are editing a record, compare the DMARC tags and DMARC policy examples before publishing.

Get started

"This clarity allows us to take action faster whether it's adjusting content, fixing authentication, or addressing reputation issues. We've moved from reactive guesswork to proactive management."

John Porteous

Group IT Manager

One DMARC checker, endless uses

Use the DMARC checker to validate a new domain, audit a sender before launch, inspect a client's DNS, or confirm a record change after propagation. It turns raw DNS into a readable report so you can catch missing records, unsafe policies, reporting gaps, and authorization issues before they affect real mail.

DNS record

_dmarc.example.com

TXTv=DMARC1; p=reject

Live DMARC DNS lookup

Check the exact TXT record receivers read at _dmarc before you rely on it.

Record found

Single record

Record valid

Syntax and duplicate checks

Catch malformed tags, invalid values, and multiple records that can make DMARC fail.

p=nonequarantinereject

Policy readiness