← All tools
EAI TOOLS

DMARC analyzer

Inspect a domain’s DMARC policy.

Analyze a message

Upload the original .eml file (maximum 220 KB) and enter the SMTP details observed by the receiving server. Use a test message where possible; the file may contain sensitive information.

SPF policies may place the supplied sender or IP address in DNS queries, where DNS operators may see those values.

Your input is processed by this site to return the result. Avoid entering sensitive information.

What does this tool do?

DMARC uses aligned SPF or DKIM authentication to evaluate the visible From domain and publishes a policy for failures and reporting.

Why is it useful?

A considered DMARC deployment helps domain owners monitor authentication and reduce domain spoofing; some mailbox providers impose sender requirements.

How to use it

  1. Identify legitimate sending services and configure SPF and DKIM.
  2. Inspect your published DMARC record and review aggregate reports.
  3. Correct alignment problems before moving gradually to a stronger policy.

What the result can and cannot tell you

A published record alone does not prove alignment or compliance. Provider requirements vary, and authentication does not guarantee delivery.

Sender requirements and compliance

Mailbox providers have their own rules, which may depend on sending volume and recipient type. For example, Gmail's requirements for bulk senders to personal Gmail accounts include SPF, DKIM and DMARC. Consult the current provider guidance and test your actual messages; a record lookup alone is not a compliance assessment.

Further reading

Explore technical help →