Free DMARC Checker

Domain-Based Messaging, Authentication and Conformance (DMARC) is an email authentication and security protocol that aids in stopping spoofing, spam, and malicious attacks using your company’s email domain.

DMARC records aren’t helpful by themselves. They’re meant to be used in conjunction with additional email authentication protocols, such as SPF and DKIM.

• Sender Policy Framework (SPF) - SPF records contain a list of domains that may send emails using your company’s domain name.
• DomainKeys Identified Mail (DKIM) - DKIM encrypts your emails with a digital signature. Your domain has a public key (listed in your DNS records), and the email service provider (ESP) has a private key (added to each new email). These two keys must align.

DMARC’s role is to instruct ESPs on what to do if an email they receive fails either the SPF or DKIM check. You can control what happens to these emails by indicating one of the available policy types in your DMARC record.

While DMARC authentication is critical for email security, misconfiguring your record can cause email deliverability problems.

The free DMARC record checker provides all you need for error assessment:

• DMARC record verification
• DMARC syntax check
• DMARC external validation
• DMARC policy checker - none, quarantine, reject
• If the policy is enabled
• Check if multiple DMARC records are present

Instead of trial and error, use the DMARC checker to rapidly pinpoint DMARC errors and correct them before they cause your emails to go undelivered.

Anytime you generate and add a DMARC record to your email domain, it’s highly recommended to use a DMARC checker.

Here are some of the most common DMARC issues that DMARC policy checkers detect (so that you can avoid them!)

• Syntax errors - Syntax errors are some of the most common errors when creating any type of record. Anything outside of what’s allowed is considered a syntax error. As such, it’s unrealistic to list all of the possible errors.

  Using a free DMARC generator can minimize the chance of syntax errors. You can input your chosen values, and the generator will output the entire record using the proper format.

• Invalid policy tags - There are only three DMARC policy types you can select (and they must be lowercase): none, quarantine, and reject. Misspelling these or mistakenly using a nonexistent tag like ‘block’ or ‘accept’ will result in an error.
• Using the incorrect alignment - One of the most common problems we’ve seen senders experience when using DMARC is jumping to a strict policy like ‘reject’ immediately. As a result, they often end up blocking emails from employees and teams within the company.

It’s recommended that you set your initial DMARC policy to ‘none’ and observe the activity. Once you gain a better understanding of who’s sending emails (support, sales, etc.), you may adjust. You’ll also have the data you need to make necessary updates to your SPF and DKIM email authentication protocols.

Important note - Many perceived DMARC errors relate to your DKIM and SPF records. If your DMARC checker results indicate no errors, be sure to investigate your DNS records for other possible issues.