MailAuthWatch

DMARC record checker

Validate a domain's DMARC policy, reporting addresses, percentage and alignment, including whether external report receivers have authorised your domain.

Free, instant, no signup. Results include SPF, DKIM and DMARC together.

What the DMARC check validates

DMARC (RFC 7489) is a TXT record at _dmarc.yourdomain.com. It tells receivers what to do when a message fails both SPF and DKIM alignment, and where to send reports. The checker verifies the v= and p= tags, flags p=none, partial pct=, a weaker subdomain policy, missing rua=, and for every external report address it looks up the <yourdomain>._report._dmarc.<reportdomain> authorisation record that receivers require before they will send reports there.

Google and Yahoo sender requirements

Since February 2024, anyone sending more than 5,000 messages a day to Gmail or Yahoo must publish a DMARC record (at least p=none), pass SPF and DKIM, and align with the From domain. Domains that do not comply see mail rejected or spam-foldered.

Get told when it changes

MailAuthWatch re-checks your domains daily and alerts you on any change. From $29/month for 10 domains.

See pricing

Recently graded domains

Public checks run in the last few days. Every report is measured live from DNS when it is opened.