DMARC Validation Tool
Looks up the public _dmarc TXT record and validates each DMARC tag.
What the DMARC Tags Mean
- v
- Protocol version. Must be exactly DMARC1 and must come first.
- p
- Policy for the domain: none (monitor only), quarantine (send to spam), or reject (block).
- sp
- Policy for subdomains. Falls back to p when not set.
- rua
- Where daily aggregate XML reports are sent.
- ruf
- Where per-message forensic reports are sent. Optional and rarely honoured.
- pct
- Percentage of mail the policy applies to. Anything under 100 leaves the rest unprotected.
- adkim / aspf
- Alignment mode for DKIM and SPF: r (relaxed) or s (strict).
- fo
- Which failures trigger a forensic report.
- ri
- Aggregate report interval in seconds. Defaults to 86400 (daily).
A record only protects your domain once the policy reaches reject and applies to 100% of mail. Start at none, read the reports, then tighten.
How to use it
- Enter Domain or IP Enter the domain name, IP address, or URL into the Dmarc Validation Tool to start the lookup or analysis.
- Run the Check Click the check button to query the relevant databases. Results are retrieved and displayed in seconds.
- Analyze the Results Review the detailed results including status, records, and diagnostics to troubleshoot or verify your query.
Tip Run the Dmarc Validation Tool from different times of day to catch intermittent issues that only appear during peak traffic.
Understanding DMARC and Its Role in Email Security
DMARC (Domain-based Message Authentication, Reporting & Conformance) is an email authentication protocol designed to give domain owners control over how their emails are handled if they fail authentication checks. It builds on two existing standards: SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail).
DMARC helps prevent email spoofing, phishing, and other fraudulent activities by allowing domain owners to specify policies for handling unauthenticated emails. These policies can instruct receiving mail servers to quarantine or reject suspicious messages, reducing the risk of malicious emails reaching users.
Why validate DMARC records? A DMARC record is a DNS TXT record that defines the policy and reporting preferences. Validation ensures that this record is correctly formatted and that the policy is properly set up to protect the domain. Incorrect DMARC records can lead to legitimate emails being rejected or spoofed emails bypassing filters.
Common situations requiring DMARC validation include setting up a new DMARC policy, troubleshooting email delivery issues, or auditing domain security. Organizations use DMARC validation tools to verify their DNS records, confirm alignment with SPF and DKIM, and ensure their email authentication strategy is effective.
What is DMARC and Why Validate It?
DMARC is an email authentication protocol that helps domain owners protect their email from spoofing and phishing attacks. It works by specifying policies that tell receiving mail servers how to handle emails that fail SPF and DKIM checks. A DMARC record is published in DNS as a TXT record and must be correctly formatted to function properly.
When to Use a DMARC Validation Tool
- When setting up DMARC for the first time to ensure the record is valid.
- After making changes to SPF or DKIM to verify alignment.
- During security audits to confirm policies are enforced.
- When troubleshooting email delivery issues related to authentication.
Common Mistakes to Avoid
- Setting a strict policy like ‘reject’ before SPF and DKIM are correctly aligned, which can block legitimate emails.
- Using incorrect syntax or missing required tags in the DMARC record, causing it to be ignored.
- Not monitoring DMARC reports, missing signs of abuse or misconfiguration.
Technical Context
DMARC builds on SPF and DKIM by adding a reporting mechanism and policy enforcement. Validation tools parse your DMARC DNS record, check for syntax errors, and verify that the policy tags are set correctly. They also assess whether your SPF and DKIM records align with the domain specified in the DMARC policy. Proper validation helps maintain email deliverability and protects your domain reputation.
Frequently asked questions
Reviews and questions
Whether this tool gave people the answer they needed, and what they asked about it.
Sign in to review this tool.
Sign In to ReviewNo reviews yet
Be the first to say whether this tool gave you what you needed.
Ask how to read the result, or what the tool does with an edge case — or answer someone else.
Sign In to AskNo questions yet
Not sure how to read a result? Be the first to ask.
AI tools related to this topic
Tools from the TiorAI directory that work on the same kind of job.
Action Network
Action Network is a free digital organizing platform designed for progressive activists and nonprofits to manage petitions, fundraising, email and SMS outreach, and events.
Layla Network AI
Layla Network AI is an AI-driven platform that automates network monitoring, anomaly detection, and troubleshooting to improve network reliability and operational efficiency.