Send your DMARC reports to DMARC Tool

One DNS change, and the daily XML reports from Google, Microsoft, Yahoo and others become a readable dashboard. Free.

  1. Create a free account and confirm your email address.
  2. Add your domain. You get a report address that belongs to that domain only, like r-abc123xyz9@dmarctool.cloudcircus.com.
  3. Add the address to your DMARC record's rua= tag at your DNS host. The app shows the exact record, with your current settings and any existing report addresses kept:
    _dmarc   TXT   v=DMARC1; p=none; rua=mailto:r-abc123xyz9@dmarctool.cloudcircus.com
    Already sending reports somewhere else? Keep that address and add ours after a comma: rua=mailto:you@yourdomain.com,mailto:r-abc123xyz9@dmarctool.cloudcircus.com.
  4. Click “Check DNS” in the app. Reports start arriving within 24–48 hours, and we email you when the first one is in.

Why a separate address per domain?

Only someone who controls your DNS can put the address in your DMARC record, so nobody else can read your domain's reports, and there's nothing else to verify.

Do I need to publish anything else?

No. Receivers only send reports to an address on another domain if that domain agrees to receive them (RFC 7489 §7.1, a TXT record at yourdomain._report._dmarc.dmarctool.cloudcircus.com). We publish that record for every domain, so it's already done.

What's in the reports?

Aggregate reports list, per sending server (IP address), how many messages claimed to be from your domain and whether SPF, DKIM and DMARC passed. They contain no message content and no recipients. We keep them for 12 months. Privacy policy.