Free DMARC checker Test and analyze DMARC, SPF, and BIMI in seconds.
Run a free DMARC check on your domain to test DMARC, SPF, and BIMI records. You get a health score and a specific fix for every issue found, with no signup.
We will generate a shareable URL for your domain.
Try popular examples: google.com, amazon.com, booking.com
No registration required. Get instant, shareable results.
Product overview
See how DMARCTrust protects your domain
A quick look at how DMARCTrust monitors your email authentication, tracks DNS changes, and secures inbound mail.
Why your emails end up in spam
Gmail, Yahoo, and Outlook receive billions of emails daily. They need to verify you're legitimate.
No identity verification
Without DMARC, email providers can't verify your emails are actually from you. They treat unverified emails as suspicious.
Spam folder or blocked
Your invoices, order confirmations, and important updates land in spam, or never arrive at all. Customers think you're ignoring them.
No visibility into failures
Email providers send authentication reports, but they're complex XML files. Without parsing them, you're flying blind.
DMARC is your email's ID card. It tells Gmail, Yahoo, and Outlook: "This email really is from us." We help you set it up, then read the reports receivers send about it.
Complete toolkit
Free email security tools
DMARC Lookup
Diagnose your DMARC, SPF, and BIMI records instantly.
DMARC Generator
Create a valid DMARC TXT record for your DNS.
Create recordMX Lookup
See inbound mail servers, priorities, IPs, and providers.
Look up MXSPF Generator
Build your SPF record with provider presets.
Create recordBIMI Generator
Generate a BIMI record to display your logo in inboxes.
Create recordSVG to BIMI Converter
Convert your SVG logo to BIMI-compliant Tiny-PS format.
Convert logoDMARC Report Analyzer
Analyze DMARC XML reports in your browser. 100% private.
Analyze reportDNSSEC Checker
Test a domain's DNSSEC chain of trust, zone by zone.
Check DNSSECComprehensive analysis
What our tool checks for
We dig deep into your DNS records to ensure every layer of email authentication is configured to current standards. Based on RFC 9989, the DMARC specification.
DMARC Record
Verification of policy settings (none, quarantine, reject), alignment parameters, and reporting addresses to prevent domain spoofing.
SPF Record
Full validation of syntax, DNS lookup counts (staying under the 10 lookup limit), and authorized sending sources.
BIMI Record
Check for BIMI record presence, logo URL validity, and VMC certificate readiness to display your brand icon in supported inboxes.
Benchmark against the best
See how leading organizations configure their email security.
Knowledge base
Frequently asked questions
Quick answers for your first DMARC check.
What is a DMARC checker?
A DMARC checker (also called a DMARC lookup tool, DMARC analyzer, or DMARC tester) is a free diagnostic tool that queries your domain's DNS records to verify the existence and validity of your DMARC configuration. It helps identify syntax errors or missing records that could lead to email deliverability issues.
How do I test if my DMARC is working?
Enter your domain in our DMARC tester above to validate your configuration. We check that your DMARC record exists, has valid syntax, and is correctly published in DNS. For ongoing verification, set up DMARC reporting to receive daily aggregate reports from email providers like Gmail and Microsoft.
How do I check my DMARC status?
Simply enter your domain name in the input field above. Our tool will instantly analyze your DNS and provide a detailed report on your DMARC, SPF, and BIMI status.
Why is DMARC important?
DMARC (Domain-based Message Authentication, Reporting, and Conformance) prevents bad actors from spoofing your domain. It protects your brand reputation and helps legitimate emails reach inboxes at Gmail, Yahoo, and Outlook.
Can I avoid using DMARC?
It depends on whether you need your emails to reach people. Since February 2024, Gmail and Yahoo require DMARC for bulk senders. Without it, your emails may land in spam or be rejected entirely. If you send transactional or marketing emails, DMARC is no longer optional.
How do I signal that a domain doesn't send email?
For domains that should never send email (parked domains, redirects, brand protection), publish a "null" SPF record (v=spf1 -all) and a strict DMARC policy (v=DMARC1; p=reject). This tells receivers to reject any email claiming to come from your domain.
Go beyond one-time checks.
DMARCTrust reads the DMARC reports receivers send about your domain. Paid plans also check its DMARC, SPF, BIMI, MTA-STS, and TLS-RPT records every hour and alert you when one changes.