Free DMARC Analyzer Tool
Instantly analyze your DMARC record to detect configuration issues, alignment errors, and potential email spoofing risks.
Instantly analyze your DMARC record to detect configuration issues, alignment errors, and potential email spoofing risks.
Use this tool to lookup and validate your DMARC record.
DMARC Status
Record Checks
| Valid DMARC record | |
| DMARC policy | |
| Aggregate Report (RUA) addresses | |
| Forensic Report (RUF) addresses | |
| Error Details | |
| Warning |
| Tag | Value | Description |
|---|---|---|
| v | DMARC Version | |
| p | DMARC policy | |
| pct | Percentage of emails to which the DMARC policy will be applied | |
| rua | Aggregate (RUA) reports URI(s) | |
| ruf | Aggregate (RUF) report URI(s) | |
| fo | The FO tag pertains to how forensic reports are created and presented to DMARC users. | |
| aspf | SPF alignment mode | |
| adkim | DKIM alignment mode | |
| rf | Format of failure reports | |
| ri | The ri tag corresponds to the aggregate reporting interval and provides DMARC feedback for the outlined criteria. | |
| sp | This tag represents the requested handling policy for subdomains. |
1. Enter your domain
2. The tool retrieves your DNS DMARC record
3. It analyzes syntax and policy settings
4. Authentication alignment is evaluated
5. You receive actionable recommendations
Once you enter a domain, the PowerDMARC DMARC Analyzer retrieves the DMARC record from DNS and validates its structure, policy configuration, and reporting settings.
This record has been correctly set up.
v=DMARC1; p=reject; rua=mailto:[email protected],mailto:[email protected];
ruf=mailto:[email protected],mailto:[email protected];
pct=100; fo=0:1:d:s;
This section displays:
The raw DMARC record discovered in DNS
A quick validation summary
Whether the record is properly configured
Which policy is currently enforced
The results include:
Valid DMARC Record
Confirms whether the DMARC syntax is valid and readable by receiving mail servers.
DMARC Policy
Shows the current enforcement policy applied to the domain:
none – monitoring only
quarantine – suspicious emails may be placed in spam
reject – failing emails are blocked
Aggregate Report (RUA) Addresses
Lists the email addresses configured to receive aggregate DMARC reports, which provide daily summaries of authentication activity.
Forensic Report (RUF) Addresses
Displays the addresses configured to receive forensic or failure reports, which may include detailed information about authentication failures.
Error Details
Indicates whether any syntax or configuration errors were detected in the record.
This section breaks down the individual tags detected in the DMARC record, explaining their purpose and configuration.
| Tag | Value | Description |
| v | DMARC1 | Identifies the DMARC version used in the record. |
| p | reject | Defines the policy applied when emails fail DMARC authentication. |
| pct | 100 | Specifies the percentage of messages to which the DMARC policy is applied. |
| rua | mailto:[email protected], mailto:[email protected] | Addresses that receive aggregate DMARC reports. |
| ruf | mailto:[email protected], mailto:[email protected] | Addresses that receive forensic (failure) reports. |
| fo | 0:1:d:s | Defines when forensic reports should be generated for authentication failures. |
If the analyzer detects issues or if the policy is still set to p=none, users can strengthen their email security by moving toward stricter enforcement and enabling DMARC monitoring.
PowerDMARC provides advanced DMARC reporting, monitoring, and enforcement tools to help organizations safely progress to full DMARC protection.
A DMARC Analyzer is a powerful tool designed to assess and optimize your domain’s email authentication setup. It evaluates your DMARC record to ensure it is correctly configured, free of syntax errors, and aligned with SPF and DKIM protocols.
By identifying misconfigurations and verifying authentication alignment, a DMARC Analyzer helps strengthen your email security posture, reducing the risk of domain spoofing, phishing, and unauthorized email use.
With clear insights and actionable recommendations, it enables you to confidently enforce DMARC policies and protect your brand reputation.
1. Detect Configuration Errors
Even small mistakes in a DMARC record can break authentication.
2. Improve Email Deliverability
Correct DMARC settings help mailbox providers trust your domain.
3. Prevent Domain Spoofing
DMARC protects your brand from impersonation attacks.
4. Ensure Policy Enforcement
Move safely toward p=reject.
Accurate DMARC Validation
Detect policy errors and missing tags.
Authentication Alignment Insights
Checks SPF and DKIM alignment.
Security Risk Identification
Find weaknesses that attackers can exploit.
Actionable Fix Recommendations
Understand exactly what needs fixing.
Upgrade to Full DMARC Monitoring
Seamless transition into PowerDMARC platform.
It evaluates your domain’s DMARC record to identify syntax errors, weak policies, and authentication alignment issues.
Yes. PowerDMARC’s analyzer lets you instantly check your DMARC record at no cost.
The analyzer identifies problems and provides recommendations, but DNS updates must be applied by your domain administrator.
Common reasons include syntax errors, missing tags, incorrect reporting addresses, or invalid policy settings.