RFC 7489 policy scoring
Is your DMARC policy strong enough — or one tag away from letting spoofers impersonate your domain?
Paste a sending domain and we'll resolve the DMARC TXT record at _dmarc.<domain>, parse the RFC 7489 tags (v=, p=, sp=, pct=, rua=, ruf=, fo=, adkim=, aspf=, ri=), and ask the analyst for a 0-100 score plus 3-5 plain-English findings. The summary anchors on four concrete axes — policy strictness (none vs quarantine vs reject), reporting coverage (rua / ruf), alignment mode (adkim / aspf), and the per-subdomain policy derivative (sp).
_dmarc.<domain>, parse the RFC 7489 tags (v / p / sp / pct / rua / ruf / fo / adkim / aspf / ri), and ask the analyst for a 0-100 score plus 3-5 plain-English findings. The summary anchors on four concrete axes — policy strictness (none vs quarantine vs reject), reporting coverage (rua / ruf), alignment mode (adkim / aspf), and per-flag remediation at the published host.Drop your email above — we'll only ping you about the monitor. No newsletters, no upsells.
Have a specific question? Email usFAQ
DMARC checker — frequently asked questions
Related sender-reputation check
Check blocklist status too
SPF, DKIM, and DMARC cover authentication; blocklist status is another part of sender reputation. Check your sending domain or IP against DNS blocklists.
Run the blacklist lookup checker →Pair this checker with the guide
Want the step-by-step walkthrough?
The SPF, DKIM, and DMARC pillar guide explains what each of the three protocols does in the receiver, how DMARC alignment works on the SPF-checked AND DKIM-signed message (with strict vs relaxed mode), and how a published TXT at _dmarc.<domain> gates you from p=none (monitor) to p=quarantine (safe default) to p=reject (the gold-standard Google + Yahoo enforce for the bulk-sender floor). Read it when you are publishing DMARC for the first time, then come back here to confirm the record you just wrote scores well.
Pair this checker with the guide
Looking for the complete authentication setup walkthrough?
The email authentication pillar walkthrough covers the four DNS-published protocols that compose the authentication floor — SPF, DKIM, DMARC, and BIMI — what each does in the receiver, the order to publish each record so the next layer does not break the previous one, and why Google and Yahoo made all four mandatory in 2024. DMARC closes the loop once DKIM + SPF are aligned; read the pillar before publishing DMARC for the first time.
Read the email authentication guide →