DMARC Checker & Generator
Read your email policy. Build it deliberately.
BUILD A RECORD
DMARC record generator
Start by observing your reports. Choose enforcement once legitimate senders are aligned.
An external report destination may require DNS authorization. RFC 9989 supersedes RFC 7489; legacy pct is not generated. The selected policy is a receiver request, not a guarantee of message handling.
UNDERSTAND THE RESULT
What this check tells you
The checker follows RFC 9989 (May 2026) and flags legacy tags. It does not discover organizational-domain fallback, authenticate an actual message or verify external report authorization. The generator runs in your browser and never publishes a DNS change.
Reference: RFC 9989 ↗
A snapshot, with context
Every report includes its check time. DNS caches, CDN edges and server configuration can change. Repeat a check after a fix and compare the actual records or responses.
Read the methodology ↗