Planning policy rollout
Read the current policy before tightening it. Test every legitimate sending stream.
DNS authentication diagnostic
DMARC record checker
Look up a domain's DMARC record and inspect the public policy used for authentication reporting and enforcement.
What is DMARC?
DMARC builds on SPF and DKIM and lets a domain publish instructions for messages that fail authentication alignment. Policies commonly include none, quarantine and reject.
What this checker reads
EmailValidly queries the public TXT record at _dmarc.yourdomain.com and reports whether a record beginning with v=DMARC1 is present.
Put the result to work
Know what the domain asks receivers to do
This lookup reads the policy at _dmarc for the submitted domain. It checks basic tags and duplicates, not a received message or every parent-domain policy that could apply.
Look up the domain
Use the domain whose published policy you want to inspect.
Read the policy and findings
The p tag states a requested treatment for failures; it is not a message pass result.
Check actual alignment
Review a real received message to assess authentication and its relationship to the From domain.
Worked examples
What the evidence tells you
Illustrative scenarios, not live results for the addresses or records shown. Open a scenario to see the next action.
01p=none
Monitor without requesting enforcement
This policy asks for no DMARC-based quarantine or rejection.
Next action Use reports to assess your legitimate senders.
02p=quarantine
Request suspicious handling on failure
Receivers apply their own local policies as well.
Next action Check that intended senders authenticate and align.
03No record at the queried name
Direct lookup is empty
This tool does not evaluate organisational-domain fallback.
Next action Review the parent-domain policy with your mail administrator.
Use it with a purpose
Where this tool fits
Debugging impersonation controls
Compare the published request with the authentication outcomes in real headers.
Before you decide
Questions about this tool
Does a reject policy guarantee spoofed mail is blocked?
No. Receiver policy and authentication behaviour still matter.
Does this tell me if a particular message passed?
No. Use received message headers for that evidence.
Can I enforce DMARC before checking my senders?
That can disrupt legitimate mail. Inventory and test your sending services first.
