DMARC Record Parser & Validator
Paste a DMARC TXT record (or look one up by domain) to parse every tag, validate values against RFC 7489, and get a plain-English readout of policy strength and common misconfigurations. Records are parsed entirely in your browser — nothing is uploaded. The DNS lookup is the only network request, sent to Google Public DNS.
Record
Parsed tags
| Tag | Value | Meaning |
|---|---|---|
| v | DMARC1 | Protocol version. Must be DMARC1 and must be the first tag. |
| p | quarantine | Policy for the domain: none (monitor only), quarantine (spam folder), or reject. |
| rua | mailto:[email protected], mailto:[email protected] | Addresses receiving aggregate (rua) reports, comma-separated. URI mailto: format. |
| sp | reject | Policy for subdomains. Defaults to the p value when absent. |
| adkim | s | DKIM identifier alignment: relaxed (r, default) or strict (s). |
| aspf | r | SPF identifier alignment: relaxed (r, default) or strict (s). |
| pct | 100 | Percentage of messages the policy applies to (0-100). |
| ri | 86400 | Report interval in seconds (default 86400). Receivers may ignore it. |
About DMARC
DMARC (Domain-based Message Authentication, Reporting & Conformance, RFC 7489) tells receiving mail servers what to do when SPF and DKIM checks fail for your domain: monitor (p=none), quarantine (spam-folder), or reject. Published as a TXT record at _dmarc.yourdomain.com.
Typical rollout: start at p=none with rua reporting to measure legitimate mail that fails alignment, fix SPF/DKIM, move to quarantine, then reject at pct=100. The rua aggregate reports are how you see who is spoofing your domain and which legitimate senders are misconfigured.