DMARC Report Reader
Reads a DMARC aggregate report: how much of your mail passed, and which sending sources failed SPF or DKIM alignment. The report never leaves your browser.
@emailens/engine 0.18.22 · data last changed 10 Nov 2026
Runs entirely in your browser. Your report never leaves your device. Accepts .xml or .xml.gz, as receivers send them.
Your next question
- Ready to tighten the policy? Build your DMARC record, free.
- Is my domain set up to send? Check SPF, DKIM and DMARC, free.
Other free tools: SPF Record Checker · DKIM Checker · DMARC Checker · BIMI Checker · Blocklist Checker · Email Header Analyzer · Email Spam Checker
Run this check on every email
SPF, DKIM and DMARC monitoring (Dev). Dev is $9 a month. Share links for your client's sign-off, a test inbox and an API key. See the plans →
Questions
What is a DMARC aggregate (RUA) report?
It's an XML file that mailbox providers like Gmail, Outlook and Yahoo send, usually daily, to the address in your DMARC record's rua= tag. Each report summarizes every message they saw claiming to be from your domain, grouped by sending IP, with the SPF, DKIM and DMARC results for each. It's how you find out who is sending mail as your domain and whether it's authenticating.
How do I open a DMARC report?
Reports arrive as compressed attachments (.gz or .zip). Upload a .gz as it is; unzip a .zip to get the raw .xml file, then paste its contents here or upload it. The XML is meant for machines, not people. This tool turns it into a readable summary.
What does it mean when a message 'passes DMARC'?
DMARC passes when at least one of SPF or DKIM both authenticates and is aligned, meaning the authenticated domain matches the domain in the visible From: address. A message can pass SPF at the server level but still fail DMARC if that SPF domain doesn't align with your From: domain. This reader reports the aligned results from each report's policy_evaluated section.
My pass rate is below 100%, should I worry?
Not necessarily. A few percent of failures are often mailing lists and forwarders that break SPF, or a stray legitimate sender you forgot to authenticate. Look at the failing sources: if you recognize them, fix their SPF/DKIM alignment; if you don't, they may be spoofing you. Only move your policy to p=reject once your legitimate mail is passing reliably.
Can I have these reports read for me automatically?
Yes. Add your domain to Emailens and it gives you a report address to put in your DMARC record's rua= tag, alongside any address you already use. Receivers then send their daily reports to Emailens as well, and your dashboard shows the pass rate, the failing message count and every sending source for the last 30 days. You get an email when a server that was not failing before starts to. It is free for one domain.
Is it safe to paste my report here?
Yes. Parsing happens entirely in your browser with JavaScript. The report is never uploaded or sent to a server. You can confirm this by disconnecting from the network and running the tool.