Oppora's Claude MCP is Live. Connect our Email Database & Outreach features with any tool to build smart automations inside Claude. Start for Free
Enter a domain to read its DMARC policy and reporting setup, and see what to change next.
Free, no signup. Up to 10 checks per hour.
DMARC is a TXT record at _dmarc.yourdomain.com. It tells receivers what to do with mail that claims to be from you but fails authentication, and where to send reports.
A message passes DMARC when SPF or DKIM passes for a domain that matches the From address. Relaxed alignment accepts subdomains of the same organizational domain, while strict needs an exact match.
This is why a passing SPF check alone is not enough: the domain that passed has to be yours.
p= sets the policy: none (deliver and report), quarantine (send to spam) or reject (refuse). sp= sets it for subdomains, and pct= limits it to a share of failing mail.
rua= is where receivers send daily aggregate reports. Without it you cannot see which services send as your domain.
Start with p=none and a rua address. Read the reports for a few weeks and fix any real sender that fails, such as a CRM or billing tool missing from SPF or not signing with DKIM.
Then switch to quarantine, and later to reject. You can raise the policy in steps with pct if you want to limit the risk.
Warm up new mailboxes and watch SPF, DKIM, DMARC and blacklists for every inbox you connect. See Email Warmup
Free plan, no credit card
A DMARC record is a DNS TXT record at _dmarc on your domain. It sets the policy for mail that fails SPF and DKIM alignment and tells receivers where to send reports.
Yes, for the requirement itself. Gmail and Yahoo ask bulk senders to publish a DMARC record, and p=none is the accepted minimum. It does not stop anyone spoofing your domain, so plan to move to quarantine or reject.
rua receives aggregate reports, daily summaries of how much mail passed or failed and from which IPs. ruf receives failure reports about single messages, which many large providers do not send.
No. A subdomain without its own record uses the parent domain's record, with the sp= policy if one is set. Publish a separate record only when a subdomain needs a different policy or report address.
It can, if a service sends as your domain without passing SPF or DKIM alignment. That is why you read the rua reports first and fix every legitimate sender before you enforce.
When rua points to an address on another domain, that domain must publish a small TXT record agreeing to receive your reports. Without it, receivers skip that address. DMARC report services set this up when you add your domain.
