Free tool

DMARC report reader

Google, Microsoft and Yahoo send you XML files nobody can read. Drop them here: we show who sends email in your name, what passes, and what to fix.

Your files are read by your browser and never leave your computer. Nothing is kept.

What is a DMARC report?

When your domain publishes a DMARC record with rua=mailto:…, the big mailbox providers send you, usually once a day, a summary of every message they received “from” your domain.

Each line says: this server (IP address) sent this many messages, did they pass SPF and DKIM, and were they aligned with your domain. It is the only way to see who really sends email in your name — including services you forgot, and impostors.

How to read the verdicts

Yours, compliant

All good

SPF or DKIM passed and matches your domain.

Nothing to do.

Yours, to fix

A known service fails

A service you probably use (newsletter, billing, CRM) sends without proper DKIM signing for your domain.

Turn on DKIM for your domain in that service.

Likely spoofing

An unknown server

A server nobody recognizes used your domain and failed.

A policy of quarantine or reject keeps these out of inboxes.

Automatic forwarding (a school or alumni address, for example) can also cause failures from servers you don't know: look at the volume before worrying.

Next steps

  1. Start with p=noneCollect reports for two to four weeks without affecting delivery.
  2. Fix each legitimate senderUntil every service you use shows as compliant.
  3. Tighten to quarantine, then rejectImpostors are then filtered out. Check your record with our SPF, DKIM & DMARC checker.