DMARC checker & builder · abbott.cloud tools

Domain

The domain in the From address. You can paste a web address or email address; only the domain is used.

DMARC record

The TXT value, with or without quotes. A line copied from a zone file or from dig works too. This is read on your device and nothing is sent. Results update as you type.

Policy for the domain (p=)

none (monitor) quarantine (spam folder) reject (refuse)

What receivers do with mail that fails DMARC. Start with none and tighten it once reports show your own mail passes.

Subdomains (sp=)

Subdomains that don't exist (np=)

Addresses for aggregate reports (rua=)

Receivers send a daily summary of mail that used your domain, and whether it passed. Separate several addresses with commas. A report service gives you an address to use: you can paste it as it comes, even with rua=mailto: in front.

More options

DKIM alignment (adkim=)

Relaxed Strict

SPF alignment (aspf=)

Relaxed Strict

Relaxed lets a subdomain such as mail.example.com count for example.com. Strict needs an exact match. Relaxed is the default and suits most domains.

Percentage (pct=)

Test mode (t=y)

Both soften quarantine or reject while you try it out. pct= applies the policy to part of failing mail (RFC 7489 §6.6.4); DMARCbis drops it in favour of t=y. Leave both alone to apply the policy in full.

Addresses for failure reports (ruf=)

When to send failure reports (fo=)

Failure reports describe single messages and can include personal data. Few receivers send them, so most domains leave these out.