DMARC record checker
Reads the policy at _dmarc.yourdomain.com and explains what it actually enforces — including whether you are collecting the reports that make DMARC useful.
What DMARC does
SPF and DKIM let a receiver check whether a message is authentic. DMARC tells it what to do when the check fails, and asks it to report back. Without DMARC, a failed check is just information the receiver may ignore.
Start at p=none
p=none enforces nothing but turns on reporting, so you find out who is sending as your domain before you start blocking anything. Almost everyone discovers a legitimate sender they had forgotten. Move to quarantine once the reports are clean, then reject.
rua is the point
Without an rua address you receive no aggregate reports, which means you are enforcing a policy blind. A DMARC record with no rua is the email equivalent of a smoke alarm with the battery taken out.
Authentication set up for you
Add a domain in Pigeonify and we generate the SPF, DKIM and DMARC records, then verify them for you. Free up to 5,000 emails a month.
Start free