DMARC Inspector

This page lets you set up and check your DMARC record for a domain.
How to add a DMARC record to DNS?
  1. Open your DNS provider console (Cloudflare, OVH, Gandi, Infomaniak, etc.).
  2. Create a TXT record.
  3. Name / Host: _dmarc (on the domain you want to protect).
  4. Value (examples):
    • Monitor: v=DMARC1; p=none; rua=mailto:dmarc@example.com
    • Quarantine: v=DMARC1; p=quarantine; rua=mailto:dmarc@example.com; pct=100
    • Strict reject: v=DMARC1; p=reject; rua=mailto:dmarc@example.com; adkim=s; aspf=s
  5. TTL: default (~1h) or 5–15 min for testing.
  6. Save, wait for propagation, then run the check again.
What does it mean?
TAGDEFAULTMEANING
vDMARC1Must always be “DMARC1”. If wrong/missing, the record is ignored.
pnonePolicy when DMARC fails: “none”, “quarantine”, or “reject”.
adkimrDKIM alignment: “r” (relaxed) or “s” (strict).
aspfrSPF alignment: “r” (relaxed) or “s” (strict).
spp= valuePolicy for subdomains: “none”, “quarantine”, or “reject”.
fo0Failure reporting options: 0, 1, d, s.
ruf—Forensic report URIs (mailto: format).
rua—Aggregate report URIs (mailto: format).
rfafrfForensic report format (“afrf”, “iodef”).
pct100Percent of traffic subject to the policy.
ri86400Requested interval (s) for aggregate reports.
Test your DMARC before adding it to DNS

Paste your DMARC record and test its validity.