DMARC RFC 9989 Validator
Validate a DMARC policy against the current RFC 9989 tag rules from DNS or a pasted record.
Lookup checks the exact _dmarc.<domain> TXT record. You can also paste a record and validate it without DNS.
Validate a DMARC policy against RFC 9989
This tool checks the DMARC TXT record at _dmarc.<domain> or validates a DMARC record that you paste directly. It focuses on current RFC 9989 syntax and tag handling, while flagging older historic tags that may still appear in legacy configurations.
How to use it
- Enter a domain for a DNS lookup, or paste a DMARC record.
- Choose Lookup & validate or Validate pasted record.
- Review the policy, subdomain policy, reporting configuration and validation findings.
Why a current validator is useful
DMARC guidance has evolved. A configuration copied from an older article or DNS template can contain tags or assumptions that no longer reflect the current specification. A current validator helps separate active policy elements from historic ones.
Multiple DMARC records
If multiple DMARC-looking TXT records are found at the policy name, the tool reports that as a configuration problem instead of guessing which record should apply.
Validation is not delivery testing
A syntactically valid record does not guarantee that legitimate mail will pass DMARC. SPF, DKIM, alignment, message flow and reporting data still need to be reviewed as part of a complete email-authentication audit.