hedwigaihedwigaihedwigai

DMARC checker: your policy, reports and what to fix

Type a domain to read its DMARC record: the policy, where reports go and how much mail it covers, with its SPF record checked too. Free, no sign-in.

Try , , . Free, no sign-in, as many as you like.

How it works

  1. Type a domain

    The domain in your From address. A URL or an email address works too.

  2. Its records read

    SPF from the domain's TXT records, every include followed; DMARC from _dmarc. under it.

  3. What to fix

    Each problem a receiving server would hit, in a sentence, with how to fix it.

Records read live over DNS-over-HTTPS from Cloudflare’s resolver, judged by RFC 7208 (SPF) and RFC 7489 (DMARC). Nothing you type is sent to hedwigai.

What is a DMARC record?

A TXT record at _dmarc.yourdomain.com that tells receiving servers what to do with mail that claims to be from your domain but fails both SPF and DKIM alignment: deliver it (p=none), send it to spam (p=quarantine) or refuse it (p=reject), and where to send reports (rua=).

Is DMARC required?

Since February 2024 Gmail and Yahoo require a DMARC record from anyone sending them more than 5,000 messages a day, and Outlook.com followed in 2025. p=none satisfies the rule, but only quarantine or reject stops someone sending as your domain.

How do I move from p=none to p=reject?

Read the aggregate reports your rua= address receives until every service that sends as you passes SPF or DKIM aligned with your domain. Then set p=quarantine, perhaps with pct=25 to start, and finally p=reject.

What is an SPF record?

A TXT record on your domain, starting v=spf1, that lists the servers allowed to send mail as it: your own (ip4:, a, mx) and your providers’, by include:. A receiving server checks the sending server against it, and the all at the end says what to do with any server not listed: -all fail, ~all soft-fail.

What is the SPF 10 lookup limit?

A receiving server will make at most 10 DNS queries to evaluate your record, counting every include:, a, mx, ptr, exists and redirect, including those inside the records you include. Past 10, SPF returns an error and your mail can fail. This checker follows every include and counts them for you.

Can a domain have two SPF records?

No. With two, every SPF check returns an error. Merge them into one record that includes every service you send from.