๐Ÿ›ก๏ธ
DMARC VALIDATOR ONLINE FREE

DMARC Validator

Look up the DMARC record at _dmarc on your domain, or paste a record, and check that every tag is valid.

If a subdomain has no DMARC record of its own, receivers use the record of its organizational domain. This tool checks the exact name you enter.

Advertisement
๐Ÿ”’ Privacy-minded processing: browser-based tools are designed to process supported inputs locally. Network-backed tools such as DNS lookup send only the requested lookup to the service.
GUIDE

What is DMARC Validator?

A DMARC validator checks that the record published at _dmarc.yourdomain follows RFC 7489. This tool validates the version tag, the policy and subdomain policy, the percentage, alignment modes, failure options and report addresses. It warns about p=none, a missing report address, partial enforcement and subdomain policies that are weaker than the main policy. When report addresses are on another domain, it checks that the destination has published the authorization record that receivers require. It checks the exact name you enter, so a subdomain without its own record may be covered by the record on its organizational domain.

WHY IT HELPS

Why use this tool?

  • Look up the record at _dmarc on a domain, or paste a record.
  • Validates the version, policy, subdomain policy, percentage, alignment, failure options and report addresses.
  • Checks that external report destinations have published the required authorization record.
  • Warns about monitoring-only policies, partial enforcement and missing report addresses.
HOW TO USE

How to use DMARC Validator

  1. Step 1. Choose Check a domain and enter your domain, or choose Paste a record and paste the value.
  2. Step 2. Select Validate DMARC.
  3. Step 3. Read the verdict, the table of tags and the messages.
  4. Step 4. Fix any problems in DNS and check again.
PRACTICAL USES

Common use cases

Confirming a new DMARC record is valid
Checking why DMARC reports are not arriving
Reviewing a policy before moving to quarantine or reject
Auditing records across several domains
GOOD TO KNOW

Important notes

  • The tool checks the exact name you enter. A subdomain without its own record may be covered by the record on its organizational domain.
  • Receivers ignore DMARC if a domain publishes more than one record at _dmarc.
  • The v=DMARC1 tag must come first and the p tag should follow it.
  • Unknown tags are ignored by receivers, so a warning usually means a typo.
RELATED TOOLS

More DNS & Website Tools

FAQ

DMARC Validator FAQ

Why am I not receiving DMARC reports?

Common causes are a missing or invalid rua address, a typo in mailto:, or an external destination without an authorization record. The validator checks each of these.

What does p=none do?

It only monitors. No mail is blocked or quarantined, so it does not protect your domain from spoofing yet.

Why does the record need v=DMARC1 first?

Receivers expect the version tag first. A record that does not start with it is ignored.

Can a subdomain have its own DMARC record?

Yes. Publish a record at _dmarc.subdomain.example.com. Without one, the organizational domain's record applies.