FREE TOOL BY WARMY.IO

DMARC Record Checker

Q: What do p=none, quarantine and reject mean?

p=none only monitors, so spoofed mail still reaches inboxes. p=quarantine sends failing mail to spam. p=reject tells receivers to refuse it. Most domains should start at none, move to quarantine once reports show all real senders passing, then finish at reject.

Q: Why is p=none a problem?

It isn't, as a starting point. The trouble is that most domains publish p=none and stay there for years. That meets the Gmail and Yahoo minimum, but anyone can still send mail that claims to be from you, and it will be delivered.

Q: What are rua and ruf?

rua is the address where receivers send daily aggregate reports: which IPs sent mail as your domain and whether it passed. ruf is for individual failure reports, which most large providers no longer send. Without rua you have no data, so you can't move to enforcement safely.

Q: What is DMARC alignment?

DMARC passes only when SPF or DKIM passes for the same domain shown in your From address. If SPF passes for your email platform's bounce domain but your From says yourbrand.com, SPF doesn't count toward DMARC. The adkim and aspf tags set relaxed (r) or strict (s) matching, and relaxed lets subdomains match.

Q: How do I fix my DMARC record?

Apply the fix shown next to each issue in the results, or build a new record with the free DMARC Generator and publish it in place of the old one.

Q: No DMARC record found: what does it mean?

Nothing is published at _dmarc.yourdomain.com, or it was added under the wrong host name. A common mistake is entering _dmarc.yourdomain.com in a DNS panel that adds the domain automatically, which creates _dmarc.yourdomain.com.yourdomain.com. Enter only _dmarc as the host and check again.

Q: How do I fix "DMARC policy not enabled"?

This warning means your record exists but uses p=none, so nothing is enforced. Read your aggregate reports for a few weeks, make sure every service that sends as your domain passes SPF or DKIM with alignment, then change p=none to p=quarantine. Some teams add pct=25 at first and raise it as confidence grows.

Q: Quarantine or reject: which policy should I use?

Reject gives full protection and is where you want to end up. Quarantine is the safer middle step, because a sender you forgot to authenticate lands in spam instead of disappearing. Stay on quarantine until reports are clean, then switch.

Q: How long does a new DMARC record take to show up?

Usually a few minutes. If your DNS host had an old record cached with a long TTL, it can take a few hours. Reports start arriving within a day or two once receivers see the rua address.

Look up and validate any domain's DMARC record: policy, alignment, reporting addresses and the exact errors blocking enforcement, each with a fix.

✓Policy & alignment
✓Report address check
✓No sign-up needed

4.9/5 on G2Trusted by 7,000+ businesses

Trusted by teams that live in the inbox

7,000+

Businesses warming up with Warmy

4.9/5

Average rating on G2

98%

Average inbox placement reached

24/7

Human deliverability support

How it works

Get from p=none to full protection

01
Enter your domain
We look up the TXT record at _dmarc.yourdomain.com.
02
Read every tag
Policy, percentage, alignment and report addresses explained.
03
Fix the errors
Each problem comes with the exact change to make.
04
Move to enforcement
Use reports to step up to quarantine and reject safely.

How to read your DMARC record: tags, policies and common errors

A DMARC record is a single TXT entry at _dmarc.yourdomain.com, but each tag inside it changes how receivers treat mail that fails SPF or DKIM. The DMARC checker above reads every tag for you. The notes below explain what the results mean and what to change.

DMARC tags explained

Tag	What it does	Common values
v	Version, must come first	DMARC1
p	Policy for your main domain	none, quarantine, reject
sp	Policy for subdomains	Same as p if left out
pct	Share of failing mail the policy applies to	100 by default
rua	Where aggregate reports are sent	mailto:reports@yourdomain.com
ruf	Where failure reports are sent	Rarely honoured by large providers
adkim / aspf	DKIM and SPF alignment mode	r (relaxed, default) or s (strict)

Only v and p are required. Without rua you get no reports, which means you're making policy decisions blind.

DMARC policy: p=none vs quarantine vs reject

With p=none, receivers deliver failing mail as usual and only send you reports. It's the right start, and it meets the minimum Gmail and Yahoo set for bulk senders, but it doesn't stop anyone from spoofing your domain. p=quarantine asks receivers to put failing mail in spam, and p=reject asks them to refuse it outright. The safe route is to read your aggregate reports until every service that sends as your domain passes SPF or DKIM with alignment, then move to quarantine with a low pct, raise it to 100, and finish at reject. Our guide on DMARC reporting and monitoring tools helps with the reports part.

DMARC errors this checker finds

The most common result is "no DMARC record found": nothing is published at _dmarc, or it sits on the wrong host. Our walkthrough on fixing the "no DMARC record found" error covers the fix step by step. Other frequent problems are two DMARC records on one domain (receivers then ignore both), a typo in a tag name, a "DMARC policy not enabled" warning on domains stuck at p=none, and rua addresses on another domain that hasn't authorised them with its own _report._dmarc record. After you edit the record, allow for the old TTL before you check again, since resolvers may serve the cached version for a while. Alignment fails are harder to spot: SPF and DKIM pass, but for a different domain than the one in your From address, so DMARC still fails.

Next step: publish, then move to enforcement

No record yet? Create one in a minute with the DMARC Generator, then come back and check it here. If your record is in place, confirm SPF and DKIM with the SPF Checker and DKIM Checker, since DMARC passes only when one of them passes and aligns. Warmy's DMARC tracker reads your reports for you, shows which senders fail and tells you when it's safe to tighten the policy.

Get from p=none to p=reject without losing real mail. Start a free 7-day trial or book a demo.

Get a 7-Day Trial Book a Demo

Why Warmy

Everything Deliverability
In One Platform

One platform, one subscription, one team, no add-ons, no extra vendors.

Scale & people

1M+ real mailboxes - The largest warm-up network — genuine Workspace, Microsoft 365 and consumer inboxes.
A dedicated success manager - A named expert who owns your placement outcomes, not a ticket queue.
24/7 support, VIP channels - Real people any hour, in your own Slack, WhatsApp or Teams channel.
120+ deliverability specialists - The largest team in the category, dedicated to inbox placement.
An in-house research team - Continuous experiments on how Gmail, Outlook and Yahoo filter this month.
Recognised experts - Specialists who advise on sender reputation daily — not generalists.

Technology

Adeline AI co-pilot - Reads your tests, DNS and warm-up data, then tells you what to fix next.
The infrastructure behind other tools - Outreach platforms and ESPs run their warm-up on our API.
One loop: test, warm, fix - Placement tests, warm-up, monitoring and fixes in a single platform.
500K+ US seed accounts - Real inboxes across major, corporate and regional providers — mobile included.
Monthly seed rotation - Aging mailboxes retire automatically, so your data comes from live inboxes.
Automation built in - n8n, Zapier, Make and a documented API — no CSVs, no manual seed files.

Included in every plan

Email verification - Clean lists before you send, so bounces never cost you reputation.
DMARC tracker - SPF, DKIM and DMARC monitoring with the exact record to change.
Deliverability tester - Instant placement, authentication and blacklist check for any sender.
Templates AI optimizer - Your campaign scored and rewritten for the inbox before you send.
Reputation tracker - Domain and IP reputation with blacklist alerts the moment a signal drops.
Google Postmaster built in - Postmaster data beside your warm-up and placement results.
Working-hours warm-up - Natural business-hours sending in the recipient’s time zone.
A robust API - Every feature available over documented endpoints.

No extra vendors, no add-on fees, no separate contracts.

Loved By Thousands Of Marketers Around The World

Over 7,000 Businesses Trust Warmy

FAQ

DMARC Checker
Questions, Answered

What is a DMARC checker?

It looks up the TXT record at _dmarc.yourdomain.com, reads every tag and tells you three things: whether the record is valid, whether the policy is enforced and whether reports are being sent to you.

What do p=none, quarantine and reject mean?

Why is p=none a problem?

What are rua and ruf?

What is DMARC alignment?

How do I fix my DMARC record?

No DMARC record found: what does it mean?

How do I fix "DMARC policy not enabled"?

Quarantine or reject: which policy should I use?

How long does a new DMARC record take to show up?

Get started

Stuck On p=none?
Warmy Gets You To p=reject Safely

Get a 7-Day Trial Book a Demo

No Credit Card Required | Cancel Anytime

Keep going

More Free Tools

Everything you need to send emails that look great and land in the inbox.

4.9/5 on G2

Recognized By The People Who Use Us

Award-winning on G2, season after season

A white and teal triangle with black text.

DMARC Record Checker

Get from p=none to full protection

Enter your domain

Read every tag

Fix the errors

Move to enforcement