Send one email to a test address and get a pass or fail for every sender rule: SPF, DKIM, DMARC alignment, one-click unsubscribe, TLS, reverse DNS and message format.
You send one real email to the address we give you. We read its headers, not your mailbox.
We keep the From address and the result so your result link keeps working and so we can follow up on anything that fails. See our privacy policy.
When your message reaches our test mailbox, Google's mail servers record whether it passed SPF, DKIM and DMARC, which IP it came from and whether the connection used TLS. We read that verdict, look up the sending IP's reverse DNS, and check the message headers for List-Unsubscribe, the RFC 8058 one-click header and a DKIM signature that covers both.
Each provider's rules come in two levels. Every sender must meet the first. Bulk senders, about 5,000 messages a day to that provider, must meet both. The results show each level separately, so you can see where you stand at today's volume and what changes if you grow.
One message tests one sending service. To see every service that sends as your domain, and whether each passes, use DMARC monitoring. To check what your DNS publishes, run the domain scanner or the email spoofing test.
Since February 2024, everyone sending to Gmail or Yahoo Mail must pass SPF or DKIM, have valid forward and reverse DNS on the sending IP, follow the RFC 5322 message format and keep spam complaints below 0.3%. Gmail also requires TLS. Bulk senders, roughly 5,000 or more messages a day, must also pass both SPF and DKIM, publish a DMARC record (p=none is enough), align the From domain with SPF or DKIM, and offer one-click unsubscribe in marketing mail.
Outlook.com, Hotmail and Live.com now require senders of more than 5,000 messages a day to pass SPF and DKIM and publish a DMARC record of at least p=none that aligns with SPF or DKIM. Mail that fails is rejected. Microsoft also recommends a working unsubscribe link and From and Reply-To addresses that can receive replies.
DNS shows what you publish, not what your mail actually does. Whether a message passes DMARC depends on which service sent it, which domain signed it and which return-path it used. One-click unsubscribe, TLS and reverse DNS only exist on a real message. So we grade the message itself, using the verdict Google's mail servers recorded when they received it.
The kind your recipients get. Add the test address to a newsletter list, or trigger a receipt or password reset from your app. Each sending service is configured separately, so test each one. A message typed in your own Gmail or Outlook mailbox only tests your mailbox.
No. Gmail and Yahoo require one-click unsubscribe (RFC 8058) for marketing and subscribed mail. Receipts, password resets and other transactional messages are exempt. The check grades the unsubscribe rules on every message and marks them as marketing-only, so you can ignore them for transactional mail.
We read its headers to grade it and keep the result, the From address, subject and sending IP. We do not keep the message body. The test address stops working after 24 hours.
© 2026 yourDMARC
Download to read the eBook
