DMARC report reader
DMARC aggregate reports arrive as dense XML that's impossible to read by eye. Paste yours to see what share of your mail is passing DMARC, which sending sources are failing, and what to fix, before you tighten your policy. Runs entirely in your browser.
Runs entirely in your browser. Your report never leaves your device.
Frequently asked questions
What is a DMARC aggregate (RUA) report?
It's an XML file that mailbox providers like Gmail, Outlook and Yahoo send, usually daily, to the address in your DMARC record's rua= tag. Each report summarizes every message they saw claiming to be from your domain, grouped by sending IP, with the SPF, DKIM and DMARC results for each. It's how you find out who is sending mail as your domain and whether it's authenticating.
How do I open a DMARC report?
Reports arrive as compressed attachments (.gz or .zip). Unzip the attachment to get the raw .xml file, then paste its contents here or upload it. The XML is meant for machines, not people. This tool turns it into a readable summary.
What does it mean when a message 'passes DMARC'?
DMARC passes when at least one of SPF or DKIM both authenticates and is aligned, meaning the authenticated domain matches the domain in the visible From: address. A message can pass SPF at the server level but still fail DMARC if that SPF domain doesn't align with your From: domain. This reader reports the aligned results from each report's policy_evaluated section.
My pass rate is below 100%, should I worry?
Not necessarily. A few percent of failures are often mailing lists and forwarders that break SPF, or a stray legitimate sender you forgot to authenticate. Look at the failing sources: if you recognize them, fix their SPF/DKIM alignment; if you don't, they may be spoofing you. Only move your policy to p=reject once your legitimate mail is passing reliably.
Is it safe to paste my report here?
Yes. Parsing happens entirely in your browser with JavaScript. The report is never uploaded or sent to a server. You can confirm this by disconnecting from the network and running the tool.