v Version
DMARC1
p Policy
none/quarantine/reject
rua Aggregate Reports
mailto:...
ruf Forensic Reports
mailto:...
pct Percentage
0-100
sp Subdomain Policy
none/quarantine/reject
DMARC results will appear here
Enter a domain and click Lookup DMARC_dmarc.google.com +short-type=TXT _dmarc.google.com-t TXT _dmarc.google.comEvery coffee helps keep the servers running. Every book sale funds the next tool I'm dreaming up. You're not just supporting a site — you're helping me build what developers actually need.
DMARC (Domain-based Message Authentication, Reporting & Conformance) is an email authentication protocol that builds on SPF and DKIM. It allows domain owners to specify how receiving mail servers should handle emails that fail authentication checks, helping prevent email spoofing and phishing attacks.
| Policy | Action | Use Case |
|---|---|---|
p=none | Monitor only, no action | Initial deployment, collecting reports |
p=quarantine | Send to spam/junk | Intermediate protection level |
p=reject | Block the message | Maximum protection, full enforcement |
Start with p=none to collect aggregate reports, analyze email sources, then gradually move to p=quarantine and finally p=reject for full protection.
Jumping directly to p=reject without proper SPF/DKIM setup can cause legitimate emails to be blocked. Always test with p=none first.
| Tag | Required | Description | Example |
|---|---|---|---|
v | Yes | DMARC version | v=DMARC1 |
p | Yes | Policy for domain | p=reject |
sp | No | Subdomain policy | sp=quarantine |
rua | No | Aggregate report URI | rua=mailto:[email protected] |
ruf | No | Forensic report URI | ruf=mailto:[email protected] |
pct | No | Percentage of messages | pct=100 |
aspf | No | SPF alignment mode | aspf=r (relaxed) |
adkim | No | DKIM alignment mode | adkim=r (relaxed) |
fo | No | Failure reporting options | fo=1 |
ri | No | Report interval (seconds) | ri=86400 |