OneWebDesk

DMARC Record Lookup

Look up the _dmarc TXT record and explain its policy and tags.

DMARC Record Lookup fetches a domain's _dmarc TXT record in real time and explains its policy (p), report addresses (rua/ruf) and alignment (adkim/aspf). Built on top of SPF and DKIM, DMARC is what ultimately blocks email spoofing — the core of protecting your sending domain.

Just enter a domain; _dmarc.<domain> is queried automatically. Whether the policy is none, quarantine or reject makes a big difference to real protection.

Policy (p) levels

  • p=none: no blocking, reports only (monitoring). The first step.
  • p=quarantine: failing mail is quarantined (e.g. to spam).
  • p=reject: failing mail is rejected. Strongest protection.

Key tags

  • rua: address (mailto:) to receive aggregate reports.
  • pct: percentage of mail the policy applies to (for gradual rollout).
  • adkim / aspf: DKIM/SPF alignment mode (r = relaxed, s = strict).

To create a new DMARC record or tighten an existing policy, build a correct TXT value with DMARC Record Generator, and review your domain's overall authentication with Email Deliverability Check.

Frequently asked questions

Is DMARC alone enough?
No. DMARC builds on SPF and DKIM results. Those must be set up correctly first for DMARC to work meaningfully.
Does p=none protect me?
It does not block anything. It's a monitoring stage; after stabilizing you should move to quarantine, then reject.
I don't see a record.
There may be no _dmarc record, or it hasn't propagated. Results are briefly cached and queried via a public resolver.
Are subdomains protected?
The sp tag sets a separate subdomain policy. Without it, the p policy also applies to subdomains.

Related tools

Email