Free email tool
DMARC checker
Read your domain’s published DMARC policy. See the record, understand its settings and review missing or malformed policy findings.
Real public DNS lookup. No account needed.
Look up your public DMARC record.
Enter your domain to see the published record and any issues found. Results appear here after a real DNS lookup.
DMARC record generator
Create a TXT record from the settings you choose. This builder runs in your browser and produces text for you to review. It does not update DNS.
Your TXT record
Add the settings you intend to publish, then generate the text. Compare it with your existing record before making changes with your DNS provider.
How to check your DMARC policy
1. Enter the domain
Use example.com, without adding _dmarc. The tool builds the DNS record name for you.
2. Read the policy
Review the public TXT record and findings about policy, syntax and reporting. Monitoring and enforcement settings are explained separately.
3. Follow up with your team
Copy the report for whoever manages your email. Review legitimate sending services and authentication results before changing policy.
DMARC questions
What does DMARC do?
DMARC lets a domain publish a policy for handling messages that fail aligned SPF and DKIM authentication. It also supports reporting. The DNS policy is one part of the process; receivers evaluate individual messages.
What is the difference between none, quarantine and reject?
p=none requests no special handling based on the DMARC policy. p=quarantine asks receivers to treat failures as suspicious. p=reject asks them to reject failures. These are policy requests, and receivers apply their own handling decisions.
Does this find an inherited policy for a subdomain?
This tool looks up the _dmarc TXT record for the exact domain entered. A missing record at that name does not prove no parent policy applies. It does not perform the full DMARC policy discovery process.
What do reporting tags mean?
Reporting tags describe where a domain asks receivers to send feedback. Their presence does not prove reports are being delivered or that an external reporting destination is authorised. Review the returned findings with your email administrator.
Does it change my DNS or enforce a policy?
No. The tool reads public records and explains findings. It does not modify DNS or process your mail. A record found result does not guarantee protection from impersonation or inbox delivery.
What information is sent for this check?
The domain you enter is sent to AskQuokka to look up public DNS. No mailbox connection is required. Tool analytics contain fixed action labels, rather than entered domains or DNS records.
Protocol reference: DMARC specification, RFC 9989.
DMARC policies, reports and setup
Free DMARC Record Generator and Setup Guide
Generate DMARC TXT record text from your domain, policy and reporting address, then check public DNS. No account, API key or DNS access needed.
DMARC Policy of Reject: Meaning and Rollout
Understand what p=reject requests, check your published DMARC policy and review alignment before moving from monitoring to enforcement.
How to Read DMARC Aggregate Reports
Understand DMARC report source IPs, counts, alignment and disposition using a fictional example. Check the policy that requests your reports.