Back to tools
FREE TOOL

DMARC policy validator

Verify DMARC DNS records are correctly configured. Check policy enforcement, alignment requirements, and reporting setup.

What It Does

Retrieve and validate your DMARC DNS record. We check policy strictness (none/quarantine/reject), verify reporting email addresses, validate alignment modes, test subdomain policies, and confirm syntax compliance. See if your DMARC actually protects against spoofing or just monitors silently.

Why It Matters

DMARC is your anti-spoofing shield—but only if configured correctly. Most domains set p=none (monitor only) and never upgrade to enforcement, leaving them vulnerable. Wrong RUA/RUF addresses mean you never get failure reports. Misaligned SPF/DKIM causes legitimate emails to fail. This validator ensures your DMARC actually protects your domain.

Key Features

  • DNS _dmarc record lookup
  • Policy level analysis (none/quarantine/reject)
  • Alignment mode checking (relaxed vs strict)
  • Reporting address validation (rua/ruf)
  • Subdomain policy detection
  • Percentage rollout checking
  • Forensic reporting configuration
  • Policy recommendation engine

Common Issues Detected

  • No DMARC record found
  • Policy set to "none" (monitoring only—no protection)
  • Invalid reporting email addresses
  • Reports being sent to non-existent addresses
  • Overly strict alignment (causing legit mail to fail)
  • Missing subdomain policy
  • Percentage rollout stuck at testing phase
  • Syntax errors breaking record

Best Practices

  • Start with p=none to monitor (2-4 weeks)
  • Analyze DMARC reports to find legit sources
  • Move to p=quarantine at pct=10, gradually increase
  • Eventually enforce p=reject at pct=100
  • Use rua= for aggregate reports (daily digests)
  • Set ruf= for forensic reports (realtime failures)
  • Apply sp= for subdomain protection
  • Use professional DMARC report analyzer

How To Use

  • Enter your domain
  • Click "Check DMARC"
  • Verify record exists at _dmarc.yourdomain.com
  • Review policy level (upgrade from "none" when ready)
  • Check alignment requirements (SPF + DKIM)
  • Verify reporting emails are correct
  • Review subdomain handling
DMARC ANALYSIS RESULTS

example.com

DMARC Record Found
Found
DMARC TXT record that specifies email authentication policy
DMARC policy is configured
-

Policy Configuration

Main Policy
-
-
Percentage
-
Applied to this percentage of emails
Alignment Mode
SPF: -
DKIM: -

Reporting Configuration

Report Destinations
Aggregate Reports (RUA)
-
Forensic Reports (RUF)
-

We’ve got you covered

Are domains included in the package, or do I need to buy them myself?

 You have 2 options on ScaledMail. You can purchase domains via ScaledMail and either use right away...or age them for use later. Aged domains have quite a few deliverability benefits! You can also use domains that you already own elsewhere on another registrar like GoDaddy or NameCheap. Our team can set up the DNS records for those domains for you and create your inboxes for sending!

Do I still need to warm up with ScaledMail accounts?

Both yes and no. While many users start sending emails right away, we’ve seen better results when accounts are warmed up for two weeks. We recommend warming up your accounts before sending.

Can I start sending from day one without warming up?

Yes, you can start sending 2 emails per day per ScaledMail account without warming up. However, we strongly recommend warming up your accounts for the best results.

Can I use domains I’ve previously used, or do I need new ones?

Yes, you can use existing domains if they aren’t damaged. That said, we recommend purchasing fresh domains since they generally perform better.

Why do we use 49 users per domain with Microsoft accounts?

This approach balances volume and safety. By sending just 2–5 emails per day per inbox, we rely on more inboxes per domain to increase overall capacity. This setup outperforms the traditional 2–3 inboxes per domain. While some competitors use 99+ inboxes per domain, this burns domains faster. We’ve found 49 inboxes to be the perfect balance.

Does ScaledMail offer Google and Microsoft accounts?

Yes, we do. We provide both Google and Microsoft accounts to ensure a diversified and stable cold email infrastructure.

How many emails can I send per ScaledMail Microsoft and Google account?

. Microsoft: Up to 15 emails/day per microsoft account (including warm-up)
.Google: Up to 25 emails/day per google account.

How does ScaledMail’s deliverability compare to other providers?

ScaledMail offers best-in-class deliverability, thanks to our advanced setup techniques and the reliability of Microsoft infrastructure.

Are the inboxes hosted on shared or private infrastructure?

Each customer is assigned separate and isolated tenants, so the infrastructure is not shared. Additionally, Microsoft rotates the tenant IP every 15 days for added security and reliability.

Tell Us A Bit About You!

Once you submit this form you'll be redirected to our pricing page!
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.