Free tool / DMARC reports
Your DMARC reports, finally readable.
Drop the files Google, Microsoft and Yahoo send to your DMARC address. See who sends as you, what passes, what to fix — and whether you can safely enforce.
Drop DMARC report files here
.xml, .xml.gz or .zip, as they arrive by email — up to 60 at once.
Read in your browser. Nothing is uploaded.
Questions people ask
What are DMARC aggregate reports?
When your DMARC record has a rua= address, mailbox providers such as Google, Microsoft and Yahoo send it a daily XML file: every server that sent mail “from” your domain, how many messages, and whether each passed SPF, DKIM and DMARC. They usually arrive compressed as .gz or .zip.
How do I know it’s safe to move from p=none to p=quarantine?
When every service you actually use passes DMARC — the analyzer marks them “Passes” — and what still fails comes from servers you don’t recognise. Read a week or two of reports first; services that send rarely, like invoicing or HR tools, may only show up occasionally.
A service I use fails DMARC. How do I fix it?
Turn on DKIM for your own domain in that service (often called domain authentication or a custom sending domain). SPF passing for the service’s own domain doesn’t count towards DMARC; a DKIM signature for your domain does.
Is it safe to upload my reports here?
Nothing is uploaded: the files are decompressed and read in your browser. The reports contain sending IP addresses and message counts, not message content or recipients.