Free DMARC Analyzer Tool

Instantly analyze your DMARC record to detect configuration issues, alignment errors, and potential email spoofing risks.

DMARC Record Checker

Use this tool to lookup and validate your DMARC record.

Please enter a valid domain name, without http:// prefix

DMARC Status

This record has been correctly setup
This record has been correctly setup, but contains unsupported DMARCbis tags
This DMARC record is invalid

Record Checks

Valid DMARC record
DMARC policy
Aggregate Report (RUA) addresses
Forensic Report (RUF) addresses
Error Details
Warning

Tags Found

Tag Value Description
v DMARC Version
p DMARC policy
pct Percentage of emails to which the DMARC policy will be applied
rua Aggregate (RUA) reports URI(s)
ruf Aggregate (RUF) report URI(s)
fo The FO tag pertains to how forensic reports are created and presented to DMARC users.
aspf SPF alignment mode
adkim DKIM alignment mode
rf Format of failure reports
ri The ri tag corresponds to the aggregate reporting interval and provides DMARC feedback for the outlined criteria.
sp This tag represents the requested handling policy for subdomains.

Trusted and Used by 10,000+ Organizations Worldwide

Coca-Cola
Grab
Rutgers-University
Tunstall
Toshiba
Merck-Group
Talpa-Network
Cloud-Security-Alliance
OLX-Group
Virgin-Australia
Oil-and-Gas-Authority
Australian-National-University
Valley-Transportation-Authority

How DMARC Analyzer Works

1. Enter your domain


2. The tool retrieves your DNS DMARC record


3. It analyzes syntax and policy settings


4. Authentication alignment is evaluated


5. You receive actionable recommendations


Understanding DMARC Analysis Results

Once you enter a domain, the PowerDMARC DMARC Analyzer retrieves the DMARC record from DNS and validates its structure, policy configuration, and reporting settings.

DMARC Status

This record has been correctly set up.

v=DMARC1; p=reject; rua=mailto:[email protected],mailto:[email protected];
ruf=mailto:[email protected],mailto:[email protected];
pct=100; fo=0:1:d:s;

This section displays:

The raw DMARC record discovered in DNS

A quick validation summary

Whether the record is properly configured

Which policy is currently enforced

Record Checks

The results include:

Valid DMARC Record

Confirms whether the DMARC syntax is valid and readable by receiving mail servers.

DMARC Policy

Shows the current enforcement policy applied to the domain:

none – monitoring only

quarantine – suspicious emails may be placed in spam

reject – failing emails are blocked

Aggregate Report (RUA) Addresses

Lists the email addresses configured to receive aggregate DMARC reports, which provide daily summaries of authentication activity.

Forensic Report (RUF) Addresses

Displays the addresses configured to receive forensic or failure reports, which may include detailed information about authentication failures.

Error Details

Indicates whether any syntax or configuration errors were detected in the record.

Tags Found

This section breaks down the individual tags detected in the DMARC record, explaining their purpose and configuration.

TagValueDescription
vDMARC1Identifies the DMARC version used in the record.
prejectDefines the policy applied when emails fail DMARC authentication.
pct100Specifies the percentage of messages to which the DMARC policy is applied.
ruamailto:[email protected], mailto:[email protected]Addresses that receive aggregate DMARC reports.
rufmailto:[email protected], mailto:[email protected]Addresses that receive forensic (failure) reports.
fo0:1:d:sDefines when forensic reports should be generated for authentication failures.

What to Do After the Analysis

If the analyzer detects issues or if the policy is still set to p=none, users can strengthen their email security by moving toward stricter enforcement and enabling DMARC monitoring.

PowerDMARC provides advanced DMARC reporting, monitoring, and enforcement tools to help organizations safely progress to full DMARC protection.

dmarc-analyzer

What is a DMARC Analyzer?

A DMARC Analyzer is a powerful tool designed to assess and optimize your domain’s email authentication setup. It evaluates your DMARC record to ensure it is correctly configured, free of syntax errors, and aligned with SPF and DKIM protocols.

By identifying misconfigurations and verifying authentication alignment, a DMARC Analyzer helps strengthen your email security posture, reducing the risk of domain spoofing, phishing, and unauthorized email use.

With clear insights and actionable recommendations, it enables you to confidently enforce DMARC policies and protect your brand reputation.

Why You Should Analyze DMARC Record

1. Detect Configuration Errors

Even small mistakes in a DMARC record can break authentication.

2. Improve Email Deliverability

Correct DMARC settings help mailbox providers trust your domain.

3. Prevent Domain Spoofing

DMARC protects your brand from impersonation attacks.

4. Ensure Policy Enforcement

Move safely toward p=reject.

Why Use PowerDMARC’s DMARC Analyzer

Accurate DMARC Validation

Detect policy errors and missing tags.

Authentication Alignment Insights

Checks SPF and DKIM alignment.

Accelerated Incident Response

Security Risk Identification

Find weaknesses that attackers can exploit.

Actionable Fix Recommendations

Understand exactly what needs fixing.

Upgrade to Full DMARC Monitoring

Seamless transition into PowerDMARC platform.

FAQ

It evaluates your domain’s DMARC record to identify syntax errors, weak policies, and authentication alignment issues.

Yes. PowerDMARC’s analyzer lets you instantly check your DMARC record at no cost.

The analyzer identifies problems and provides recommendations, but DNS updates must be applied by your domain administrator.

Common reasons include syntax errors, missing tags, incorrect reporting addresses, or invalid policy settings.

Upgrade from DMARC Analysis to Full Protection