Read your DMARC reports without paying for a dashboard
Your rua= address collects XML from Google, Microsoft, Yahoo and others that nobody reads. Drop the files here to see which senders pass alignment, which fail and exactly why, and whether it is safe to tighten from p=none. Everything is processed in your browser. Need the DNS side? Try the Email Auth Check.
Your reports
Summary
Senders
| Source IP | Messages | Aligned | Failing | Status | What to do |
|---|
Questions
How do I read a DMARC aggregate report?
Each report is XML sent by a mailbox provider listing, per sending IP, how many messages it saw and whether SPF and DKIM passed and aligned with your From domain. Drop the files here and the tool groups them by sender and flags the ones that fail.
When is it safe to move from p=none to p=quarantine?
When your legitimate senders (your mail provider, your newsletter tool, your CRM, your invoicing system) all show as aligned across a couple of weeks of reports. Start with quarantine at pct=10 and raise it. The tool reports the aligned share and lists every failing source so you can check each one.
Why does a sender pass SPF or DKIM but still fail DMARC?
DMARC needs alignment: the domain that passed must match your From domain. Third-party senders usually pass SPF for their own bounce domain and sign DKIM with their own domain, so neither aligns until you set up a custom return-path and custom DKIM key for your domain.
Are my reports uploaded anywhere?
No. Files are read and decompressed in your browser and the page makes no network requests. Reports contain your sending IPs and volumes, which is why a local tool is useful.
Which file types work?
Plain .xml, gzip (.xml.gz, what Google and others send) and single-file .zip (what Microsoft and Yahoo send). Drop many at once to merge them.