CloudJet/DMARC checker

DMARC policychecker.

DMARC tells receivers what to do when SPF or DKIM fail and enables aggregate reporting so you can see authentication drift.

All toolsAuthenticationFree · no signup
dmarc-checker
Live
Free public DNS lookup. No account, nothing stored.Try
In plain terms

What this checks,and why.

In one line

A DMARC checker reads your _dmarc TXT record and validates policy, alignment mode, and reporting addresses.

Why it matters

Without DMARC, spoofing and authentication failures are harder to detect and remediate at scale.

How to act on it

Start with p=none and RUA reporting, then tighten policy as SPF and DKIM alignment stabilize.

Guide

Read the result.

DMARC alignment explained

Alignment means the organizational domain in SPF or DKIM matches the From header domain per DMARC rules.

Strict alignment (adkim=s; aspf=s) is tighter; relaxed alignment is more forgiving but still requires a domain relationship.

Safe DMARC rollout

Publish p=none first and monitor aggregate (RUA) reports. Move to quarantine, then reject, only when legitimate streams pass consistently.

An aggressive reject without monitoring can block legitimate mail from third-party senders.

FAQ

Questions, answered.

A TXT record at _dmarc.yourdomain.com defining policy (p=), alignment (aspf/adkim), and optional reporting URIs (rua/ruf).

Free tools

Fix it once.Watch it forever.

CloudJet re-checks every record on every sending domain daily and fixes drift before it costs you the inbox.