Free Tool

DMARC Record Checker

If your DMARC policy is set to p=none, anyone can send phishing emails that appear to come from your domain, and Gmail will deliver them. Use this DMARC tester to check your policy and reporting configuration in under 10 seconds.

Email Deliverability Report

The 1% Bottleneck
Causing brand's
eCommerce
Cash Flow Fails.

Low deliverability isn't just a number. It's an invisible barrier keeping your high-converting emails away from high-value inboxes. Secure every sender signal.

Start Revenue Recovery Scan My Deliverability Profile

Live inbox placement

brand

—

reached the primary inbox · — emails analyzed

Inbox

—

Promotions

—

Spam

—

emails never reached the inbox: — of sends your customers never saw

Campaigns tracked: —
ESP: —

Unlock the full report

Emails analyzed

—

— unique campaigns

Inbox rate

—

Primary tab placement

Promotions rate

—

Delivered, then filtered

Spam rate

—

Filtered to spam

Where it landed

Inbox, Promotions, or Spam?

Green = Inbox · Amber = Promotions · Red = Spam. These are the same signals InboxEagle monitors in real time.

Inbox

Primary tab placement

—

Promotions

Delivered, but filtered to Promotions

—

Spam

Filtered to the spam folder

—

By provider

Deliverability by inbox provider

Gmail, Yahoo, AOL, and Outlook don't treat this sender the same. See the split, then monitor each provider in real time.

Provider	Inbox	Promotions	Spam	Rating
Want to see more providers? Sign up free to unlock every provider mailbox and rating in real time. Sign up free

Campaigns

Recent campaign placement

The first subject is public. Remaining subject lines are locked. Sign up free to see every send.

Subject	Placement	Inbox / Promo / Spam
Want to see more subjects? Sign up free to unlock every campaign subject, placement split, and spam risk. Sign up free

Infrastructure

Sending IPs

Recent IP activity. The first address is visible. Sign up to unlock the rest and block list status.

IP Address	Emails Sent	Block list
Want to see more sending IPs? Sign up free to unlock every IP address, send volume, and block list status. Sign up free

Creative

Subject line patterns

The first pattern is public. Remaining subject lines are locked. Sign up free to see every pattern on file.

Want to see more subject patterns?

System Status: Operational

Ready to Transform your Deliverability from Guesswork to Revenue Security?

Start protecting your inbox placement and recovering revenue with InboxEagle's active intelligence agent.

Start Revenue Recovery Start 14-Day Trial

DMARC Test: Check Any Domain's Record in Seconds

This DMARC tester looks up the DMARC TXT record published at _dmarc.yourdomain.com for any domain you enter. Used as a DMARC test tool, a DMARC domain checker or a DMARC inspector, it shows the policy, the subdomain policy, whether aggregate reporting is set up, and the problems it finds. Run it as a quick DMARC check before and after any DNS change.

A DMARC test of the record does not replace testing real mail. The record tells receivers what to do with messages that fail, while each message's own result sits in its headers. For both views, run the record through this checker and a sample message through the email header analyzer or the email spam tester.

DMARC depends on the other two records, so check them too with the SPF record checker and the DKIM record checker, or scan the wider setup with the domain security scanner. The SPF, DKIM, DMARC checker guide shows how to read all three results together.

Why DMARC Enforcement Matters More Than You Think

What DMARC actually protects you from

DMARC stops three threats: spoofing (emails faking your domain), phishing attacks on your customers, and reputation damage from unauthorized sending. Without it, anyone can send email that appears to come from yourcompany.com, and Gmail will accept it.

p=none, p=quarantine, p=reject: what you're actually risking at each level

p=none means you're watching but not acting, so your domain can still be spoofed. p=quarantine sends failing emails to spam. p=reject is full enforcement: it asks receiving servers to reject unauthorized emails, though each receiver decides how to handle them. Most brands with deliverability problems are stuck at p=none for months.

The daily reports you should be reading, but probably aren't

The rua tag instructs inbox providers to send you daily XML reports showing every IP that sent email claiming to be your domain. These reports reveal unauthorized sending from misconfigured services, shadow IT tools, and active phishing campaigns. Without rua configured, you're blind.

Alignment: the setting that determines if your DMARC policy actually fires

Alignment links your DKIM signature and SPF Return-Path back to the From header. If alignment fails, DMARC doesn't trigger, even if SPF and DKIM both pass individually. Strict alignment requires exact domain matches; relaxed allows subdomain matching. Most ESPs require relaxed.

Fix What You Found

DMARC Record Generator →SPF Record Checker →DKIM Record Checker →Deliverability Health Check →

Learn More

↗

SPF, DKIM, and DMARC Explained

The Authentication Trinity: plain-English breakdown of what DMARC alignment requires.

↗

Does DMARC Failure Guarantee the Spam Folder?

2.2M email study: DMARC-failing messages hit spam 30.75% of the time vs 16.7% for passing.

Why We Built This Tool

Phishing attacks that impersonate your domain don't require breaking into your systems. They just need you to have weak DMARC. InboxEagle monitors 2,000+ brands and sees that p=none is the most common setting by far. Brands often stay at p=none for months because they're afraid of breaking legitimate email. This tool shows you exactly what will happen if you enforce.

What Goes Wrong Without This

Without DMARC enforcement (p=reject), anyone can send emails that appear to come from your domain. If your policy is p=none or missing, phishing attackers will spoof your domain, and Gmail will deliver the emails. Your customers get phished, your brand gets damaged, and ISPs start filtering your legitimate mail too.

Who This Tool Is For

E-commerce & DTC Brands

Teams sending transactional and marketing emails who want to prevent phishing emails that impersonate their brand and damage customer trust.

Email Marketing Agencies

Agencies managing client domains who need visibility into unauthorized sending and daily aggregate reports to catch phishing attacks early.

B2B SaaS & Outbound Teams

SaaS companies and outbound teams who need airtight DMARC enforcement to prevent attackers from spoofing their domain in phishing campaigns.

Frequently Asked Questions

What is DMARC?

DMARC (Domain-based Message Authentication, Reporting and Conformance) is a TXT record on your domain that tells ISPs how to handle emails that fail SPF or DKIM authentication. It also instructs inbox providers to send you daily reports on any email claiming to be from your domain.

What's the difference between p=none, p=quarantine, and p=reject?

p=none means DMARC is monitoring only: failing emails still get delivered. p=quarantine sends failing emails to spam. p=reject blocks failing emails at the gateway. Most brands start at p=none for safety, then gradually move to p=reject as they verify all their legitimate senders pass authentication.

Do I need both SPF and DKIM for DMARC to work?

DMARC requires at least one of them, either SPF or DKIM, to align with your From domain. Both is better because it covers more sending paths and makes DMARC enforcement more reliable. Without SPF or DKIM configured, DMARC can't protect your domain.

How can I perform a DMARC email check?

Enter your domain in the checker above and press Check DMARC. The tool looks up the DMARC TXT record published for the domain and shows the policy (p=none, p=quarantine or p=reject), whether aggregate reporting (rua) is set, and any problems it finds. To check what happened to one specific message instead, read the dmarc= result in its Authentication-Results header with the email header analyzer.

Can an email checker DMARC lookup tell me if one message passed?

No. The lookup reads the DMARC record a domain has published, not the result for one message. For a single message, open its headers and read dmarc=pass or dmarc=fail in the Authentication-Results line, for example by pasting them into the email header analyzer.

How do I send a DMARC test email?

Send a normal message from the domain you want to test to a mailbox you control, such as a Gmail address, then open its headers and look for dmarc=pass in the Authentication-Results line. You can also send the DMARC test mail to the email spam tester, which reports the SPF, DKIM and DMARC results for the message it receives.

What is a DMARC compliance check?

A DMARC compliance check confirms that a domain publishes a DMARC record and that its policy meets the standard you are aiming for. Gmail, Yahoo and Outlook require DMARC from bulk senders (5,000 or more emails a day), p=none is the minimum starting point, and providers expect senders to move toward p=quarantine or p=reject. This checker reads the policy record, so it shows whether the record meets that bar. It does not measure how many of your messages pass alignment.

Is this a DMARC validator?

Yes. As a DMARC validator it reads the record tag by tag and flags what it can detect: a missing record, a weak policy, missing aggregate reporting (rua) and the deprecated pct tag, and it reports the subdomain policy (sp=) and the DKIM alignment mode (adkim=). That also makes it a DMARC syntax checker for those tags. To build a record from scratch, use the DMARC record generator and then check the result here.

Do I need an InboxEagle account to use this tool?

No. This tool is completely free and requires no account or sign-up. InboxEagle provides it as a standalone resource for email marketers, developers, and agencies.

One Policy Change Can Block Phishing Attacks on Your Customers

This checker is a free one-off look at your DMARC record. InboxEagle checks your DMARC policy record every 24 hours and alerts you if it changes, and tests inbox placement at Gmail, Yahoo, AOL and Outlook with seed mailboxes. Processing the aggregate (rua) reports themselves is a separate product, DMARC Processing.

Start Free 14-Day Trial

14-day free trial · No credit card · Cancel anytime

Not ready yet?See how DMARC Monitoring works →