# DMARC record validator

Validate live DMARC DNS records and required DMARC tags.

Validate your live DMARC DNS record and get a pass/fail checklist for required tags.

Use this DMARC validator to test your published DNS record and catch common configuration errors.

## What this DMARC validator checks

- DMARC record discovery in DNS
- Required tags like `v` and `p`
- Aggregate reporting tag (`rua`)
- Overall record validity from MailSlurp tooling

## Fixing failed validation

If validation fails, start by checking:

- The record is published at `_dmarc.yourdomain`
- The record includes `v=DMARC1` and a policy tag like `p=none`
- Tags are separated with semicolons and contain no extra quotes

## Recommended rollout

Many teams start with monitoring and tighten enforcement over time:

1. Publish `p=none` with a valid `rua` address to collect aggregate reports
2. Move to `p=quarantine` after alignment is stable
3. Enforce `p=reject` once legitimate senders are fully covered

## When to run DMARC validation

- Right after publishing DNS changes
- During staged rollouts from `p=none` to `p=reject`
- After domain migrations or ESP changes

## Related tools

- [DMARC record generator](https://www.mailslurp.com/tools/dmarc-record-generator/)
- [DMARC report analyzer](https://www.mailslurp.com/tools/dmarc-report-analyzer/)
- [BIMI checker](https://www.mailslurp.com/tools/bimi-checker/)