DMARC record checker
Look up the DMARC TXT record at _dmarc and explain the published policy. The result does not mean a receiver will follow it, and it does not prove mail will arrive.
This one uses a server lookup because the job cannot finish on the device alone.
How to use it
- 1Enter the domain you want to check.
- 2Choose Check.
- 3Read whether a record exists and which policy it publishes: none, quarantine, or reject.
- 4Copy the record if you need to compare it with what you meant to publish.
When it helps
- Confirm a new DMARC record is visible.
- See whether the policy is still none.
- Find the address that receives aggregate reports.
Good to know
- A published policy is not proof that receivers enforce it.
- This check does not inspect a message, a DKIM signature, or SPF alignment.
- Only the _dmarc name is queried. Kiln does not send mail to the rua address.
- A public resolver cannot see a private record.
Questions
Does p=reject mean mail is being rejected?
No. It asks receivers to reject mail that fails DMARC. This tool does not send a message or watch what receivers do.
Where is the record?
It is a TXT record at _dmarc, followed by the domain. The domain itself can have no DMARC record while mail still flows.
Related tools
SPF record checker SPF record checker
Read and explain the SPF policy a domain publishes. This does not prove mail will be delivered.
Email
MX record checker MX record checker
See the mail servers a domain publishes. This does not prove a mailbox exists.
Email
DNS lookup DNS lookup
Look up public DNS records for a domain. Kiln does not connect to the host.
Network