DMARC check: is your DMARC policy enforced and reported?
Parses your domain's DMARC record (p, sp, rua, ruf, pct, adkim, aspf) and explains, in plain language, what will happen to mail that fails SPF or DKIM alignment, plus whether aggregate or forensic reports are configured to tell you about it.
What the result means
Start at p=none to gather rua reports before moving to quarantine or reject, so enforcement does not block legitimate mail you forgot was sending on your behalf.
How it works and limits
This tool fetches the TXT record at _dmarc.<your domain>, parses its tags with AdminKit’s own code, and explains
each one in plain language. DMARC (Domain-based Message Authentication, Reporting and Conformance) tells receivers
what to do with mail that fails SPF or DKIM alignment, and asks them to report back on what they saw.
Reading the tags
p is the headline policy for the domain itself (none, quarantine, reject); sp can set a different policy for
subdomains. pct rolls out enforcement gradually by applying the policy to only that percentage of failing mail.
rua and ruf are reporting addresses — aggregate (daily summaries) and forensic (per-message, less widely
supported) respectively. adkim/aspf choose strict or relaxed alignment between the visible From: domain and the
domain that actually passed SPF/DKIM.
A sensible rollout path
Most domains start at p=none to collect rua reports without affecting mail delivery, confirm every legitimate
sending source is accounted for, then move to p=quarantine and eventually p=reject once confident nothing
legitimate will be blocked.
Limits
- This checks whether the record itself is well-formed, not whether your mail flow would actually align — only
real reports (
rua) show that. - No query is logged; see /legal/privacy/.
Frequently asked questions
What does p=none mean?
p=none asks receivers to take no action on failing mail but still send aggregate reports — it is a monitoring-only starting policy, not enforcement.
Do I need both rua and ruf?
rua (aggregate reports) is the practical minimum for visibility; ruf (forensic, per-message reports) is optional and less widely supported by receivers.