paulobrien.dev

Tools DMARC report reader

DMARC report reader

Free for subscribers

See every service sending email as you.

DMARC reports are the XML files Google, Microsoft and others send about your domain. Upload them here and see, in plain English, every service that sent email as you, how much of it passed and what to fix before you turn DMARC up.

Built with Workers, D1

Report files

    Free for subscribers

    Subscribe free to use the DMARC report reader, up to 20 report files a day, 10 MB each. Subscribers can use every tool on paulobrien.dev and hear when there's something new.

    Files are read and thrown away. Nothing from them is kept.

    Example report

    brightwell.co.uk

    96%
    Your own mail passesOne server we don't recognise sent 14 emails. Check whether it's yours.
    ✓Google Workspace1,204 passed
    ✓Mailchimp3,310 passed
    !XeroDKIM missing
    ✕Unknown server14 failed
    ✓Forwarded mail38

    // what it checks

    What you get.

    Who sends as you

    Every service that sent email using your domain, named, with how many emails and whether they passed.

    What to fix

    The SPF or DKIM setting each failing service needs, step by step.

    When to turn it up

    Whether it's safe to move from p=none to quarantine or reject without losing real email.

    Everything it looks at

    • .xml
    • .xml.gz
    • .zip
    • Senders by name
    • Pass and fail counts
    • SPF alignment
    • DKIM alignment
    • Forwarded mail
    • Unknown servers
    • Policy advice

    // how it works

    Three steps.

    1. Find your reports

      Google, Microsoft and others email them to the address in your DMARC record, usually as .zip or .gz files.

    2. Drop them in

      Up to 10 at a time. They're read on the spot and thrown away.

    3. See who's sending

      Each service named, with how much passed and the setting it needs if it failed.

    // questions

    Good to know.

    I don't get any DMARC reports. Why?

    Your DMARC record needs a rua= address for reports to be sent to. The DNS checker shows your DMARC record and the line to add.

    Are my files kept?

    Files are read and thrown away. Nothing from them is kept.

    When can I move to quarantine or reject?

    Once every service you send with passes. The reader tells you when it looks safe to turn DMARC up without losing real email.

    Stay in the loop

    Subscribe for updates.

    Leave your email and I'll tell you when there's a new version of one of my apps, or a new project to try. You can also use every tool on this site, free.

    That didn't work. Please check your email address and try again.

    One email to confirm. Unsubscribe with one click. Your address is only used for these updates.